UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 



ALL IHFORHATION COHTAIITCD 

HEREIW IS UNCLASSIFIED 

DATE 04-09-2009 BY 60322 UC/LP/STPyiCF 



From: 

Sent; 

To; 


Cc: 

Subject; 



UNCLASSIFIED 

NON-RECORD 


be 

AAAAAAAUGHtt! b7c 

Asking the Security Division if we shouid be more restrictive is like asking an ice cream salesman if we should buy ice 
cream. 

The intent of the EC is evident both from its provenance and from the "Synopsis". The EC is from Dl's Issues Group, 
which sits on the Information Sharing Policy Group (not the Information Restricting Policy Group, which, I believe, is 
somewhere deep in the bowels of the Security Division). The Synopsis explains that the Dl is trying to "right a wrong" that 
is harming the FBI's information sharing efforts: "the fact that many texts which should be 
widely circulated among the community of investigators and analysts are 
currently marked ORCON." 

If the result of this EC is that the FBI starts restricting more information, that would be entirely the OPPOSITE of what the 
EC calls for. 

Normally I agree with you, a but if you push this any further I'm afraid (11 have to catch the next plane to Washington 
and submit you to some combination of therapy and Chinese water torture until you come to your senses. 


Original Message 

From: I 

Sent; 

To; 


Cc: 

Subject: 





RE: ORCON EC 


UNCLASSIFIED 

NON-RECORD 


h2 

b6 

b7C 

:b7D 


I see the EC as sayi ng that w e should make sure the info is not posted to locations you can get to without a need to 
know. Red Wolf and l "l ail have access controls that ensure that compliance. 

I guess if no one ever thought it should be on there before, I'm making a mountain out of a pebble. If the general 
consensus is it's overkill. I will ask Security Division and see what they say; if they think it's not necessary, i will cease 
and desist 


OriQinaLMessaae-— 


urigin 

L 


From 

Sent: Thursday, June 08. 2006 3:12 PM 

To; I 


I 


Cc: 

Subject: RE: ORCON EC 


148 

/ ’ 


/ 






UNCLASSIFIED 

NON-RECORD 


My suggestion would be that, in this,sDRCifio case, we nntiakeJhe initiative to do somethinn absnIutelvJnsanft 
^ unless or until we're told to do that. 


— -Original Message 

Fn>m; F" 

Sent 


b2 

foe 

fo7C 

fo7E 





Subject: 


RE: ORCON EC 


UNCLASSIFIED 

NON-RECORD 


Just trying to comply with marking requirements. 

I have never used ORCON. but this EC leads me to believe it should be used. 


-Original Message 


From: 

Sent: 

To; 


i 


Thursday. June 08. 2006 3;07 PM 


Cc: 

Subject: 


[ 




RE:“CikC^ e£" 


UNCLASSIFIED 

NON-RECORD 


1 


fo6 

fo7C 


Are we creating an issue where one does not exist? 

— Original Mess age — 

From: I I 

Sent: 

To: 


Cc: 

Subject: 

UNCLASSIFIED 

NON-RECORD 


Thursday. June 08. 2006 1:56 PM 


RE: ORCON EC 


The purpose of the EC is to discourage the use of ORCON and 1 am very opposed to markincj 1 
[■“^RCON. ^ ' b2 

fo6 
fo7C 
fo7E 


— Original Message — 

F'*oni: i 

Sent; Jhureday,7une 08, 2006 

To: I 




Cc: 











Subject; 


ORCON EC 


UNCLASSIFIED 

NON-RECORD 



h2 

he 

hlC 

hlE 


Since all! J have I [ then as I read this 

email I am thinking they should all be listed ORCON. We never have done that, although some 
emails I see from some offices do come with that heading in addition to NOFORN. 


Am I understanding correctly that ORCON should be shown on the header for 
objections? 



Standards, Policy, and Metrics (SPAM) 
Operations Management Unit (OMU) 
Language Serv ices Section, Dl 
I l (again changed number) 

. "SPAM ... CAN!" 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 






ALL IHFORMATIOJI COHTAIHFD 
HEREIH IS UNCLASSIFIED 
nATE^n^-na-9nnQ /t p^tp /.tpf 


b 6 

hlC 

hlE 


From; 

Sent; 

To: 


Cc: 

Subject: 


[ 




1 


RE: ORCON EC 


UNCLASSIFIED 

NQN-RECQRO 


Why would you ask Security?! Don’t ask the question if you’re afraid to hear the answer. Frankly, Tm afraid to hear the 
answer. 



UNCLASSIFIED 

NON-RECORD 


I see the EC as savi ng that w e should make sure the info is not posted to locations you can get to without a need to 
know. Red Wolf and l t all have access controls that ensure that compliance.. 

I guess if no one ever thought it should be on there before, I’m making a mountain out of a pebble. If the general 
consensus is it's overkill, I will ask Security Division and see what they say; if they think ifs not necessary, I will cease 
and desist. 


— Original Message — 

From: i 

Sent; Thursday, June 08, 2006 3:12 PM 

To: I 

Cc: 

Subject: RE: ORCON EC 

UNCLASSIFIED 

NON-RECORD 


My suggestion would be that, in thi s specific case, we not take the initiative to do something absolutely insane 
unless or until we're told to do that. I 

I ^.1 


— Onginal Message 


-■ 

From: 1 


Sen 

t: Thursday, June OS, 2006 3:10 Pi 

M. . 

To: 

Cc: 




Subject: RE: ORCON EC 






ALL IHFORHATIOir COUTAIHED 

HERira IS raiCLASSIFIEti 

DATE 04-09-2009 BY 60322 UCyLP/3TP/JCF 


From: 

Sent: 

To: 


Cc: 

Subject: 


UNCLASSIFIED 

NON-RECORD 


Thiirsriav .limftnfi ?DnR 4~R1 PM 




’R‘E^"6R'cr6NE'e ■" ■■ 

b2 

b6 

b7C' 

■b7E 


And remember. . I i Red Wolf. If you even say the 

word ORCON to the Security Division, this will open a can o f worms that might wreck a great accomplishment. (Not to 
mention the fact that Red Wol fl i QRCQN requirement in mind.) 


Original Message' 

From; I 


Sent: 

To: 


Cc: 

Subject: 


Thursdav^June Q8. 2006.2:46 PM 
RE: ORCON EC 


UNCLASSIFIED 
^ NON-RECORD 

■ / 


I endorser b sentiments (wouldn't do the torture myself but I WOULD watch!). I I 

I Besides, the issue of defining 

tne -originator comes up. vvno wouia tnai oe/ Again, we snouia oe in me easiness or promoting the sharing of 
information, not restricting it. 


> — Origin al Message- 


> From: 

> Sent: 

1 — 1 

Thursday, June 08, 2006 4:00 PM 


> To: 

1 


> 



r 

> 




> 


1 

1 

>JC£i 


3 

> 

1 



> Subject: 

RE: ORCON EC 



> 


> UNCLASSIFIED 

> non-record 



> AAAAAAAUGH!!! 


> 

> Asking the Security Division' if we should be more restrictive 

> is like asking an ice cream salesman if we should buy ice cream. 

> 

>The intent of the EC is evident both from its provenance and 
> from the "Synopsis". The EC is from Dl*s issues Group, which 


124 






aIaI A 


> UNCLASSIFIED 
UNCLASSIFIED 
UNCLASSIFIED 

UNCLASSIFIED 

/ 

UNCLASSIFIED 


140 



Subject; RE: Urgent need for additional R^wolf Station in | f 


Hey 


b2 

h6 

hlA 

hlC 

b7E 


There are a lot of problems wit H b ut will try and help you guys. 


f 


First of all, I do not believe you have enough space right now to support another RedJ/Volf woikstation. but will se 
what we can do. Remember the Red Wolf that you have is a| 


1 


I 


Due to 


Space up there is tight. I was told that the RA, right now, can not su pporT^ , 

A/C problems and electrical r equirem ents). Remember, I tried to oet i l t8'"illilV6 lYlg* SPaC6 riqni ror gening a 

Red Wolf system up there b u < I would n ot commit, stating that squad spaces had not been firmed up. The fight is 
over, up al landl has to live with a | [ Thd * 

i J ^ - ■ — — 1 ‘ 


L be rsonnel problems continue to plaq ue the Main Office. I believe around two bmp lovees will be leavi ng 

Jwithin the next few months. I | ls our major concern. At the pres ent timg l ean not give r I he 


support it really needs. I believe we need to have a meeting to discuss all oC 


Issues and what we can support. 


Thanks 


[ 


From: 
Sent; 
To: 
Cc; 


Mnndav PM 


Subject: Urgent need for additional Redwolf Station i tZJ 

S ^gfepT 


bl 

b2 

b6 

■ b7A 
b7C 
b7E 




3a s you know, we currently have three Redwolf t erminals iff 

r ' - 


case. For various operational feasons^ w to haro 




in an-unreiatea 
D this case in 


[ 


justification at any level if that is needed. 


^^kWe expect to go up onl 


[ 


r 


Additionally, we are drafting a newl 


This case continues to be a priority at HQ so I am happy provide 

n 


(U) Also, construction on our expansion in the RA continues and we expect to occupy the new space circa August 
or September. At the very least, we will want to relocate the terminals on the 5th floor to other work areas, also on 
the 5th floor. No firm plans have been made but it is possible that t he I S p resence in the RA will also increase at 
that time so we want to continue to be thinking about expanding th^ Icapabilities. 


We appreciate your assistance. 








SECRET 


[illsiEmii 


DERIVED FROM: G-3 F 


EXEMPTION 1 

SECRET 




investiaations 


I ^ LTi ^ *M 3 i'i g»ai m ■ J i ^ 


PTION 1 


SECRET 


DERIVED 






SECRET 


ON EXEMPTION 1 




ounterintelliaence Investiaations 


n counterintelliaence Investiaations 


- UN0LA3 8I P > e tr 
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ALL INFORHATION COKTAITIED 

HEREIN IS UNCLASSIFIED 

DATE 04-09-2009 BY 60322 UC/LP/STP/JCF 



b2 
b6 
b7C 
>b7E • 


From: 

Sent: 

To: 

Cc: 


Subject; 



SENSITIVE BUT UNCLASSIFIED / 

NON-RECORD 


Can anyone provide an update to this RMS ticket? Last entry was March 06, 
Thanks 



Last Entries: 
3/30/06 8:39:00 AM 



We are still working to resolve th 




8/29/05 1 :13:26 P M ~1 

h as Reassigned or Forwarded this request it 





Subject: RMS 102667 -j Windows workstation 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


RMS 102667 


on the RedWolf are still giving us problems 









1 will keep you posted. 



i 

I 


SENSITIVE BUT UNCLASSIFIED 

I 

SENSITIVE BUT UNCLASSIFIED 



m 








DECLASSIFIED BY 60322 UC/LP/STP/ JCF 
ON 04-09-2009 


Subject: Updated; RE; Supplemental procedures 

:b2 
b6 
b7C 
b7E 


Meeting Status: Accepted 


Required Attendees: 


Start; 

End; 


Wed 6/21/2006 1;30 PM 
Wed 6/21/2006 2;00 PM 


Recurrence; 


(none) 


I don*t understand how we, the people that provide technical capability, satisfy an audit request that deals with 
the propriety of collected data. I see this as the responsibility of the substantive squad in the field and the 
substantive desk at HQ, Pis get together with me at 4 PM today to discuss how we satisfy this request. 

Thanks. r I 


From: DICLEMENTE. ANTHONY P. (OTD) (FBI) 

Sent: Tuesday. June 20. 2006 10:14 AM 

Cc: 

Subject: RE; Supplemental procedures 

" SCORCT - 

RECORDi 


I wifi have DITU initiate the audit o i I I agree w/co nducting a joint audit off 

you to coordinate. I will have DITU coordinate w/ | Dn the final submission tc 


1 - 1 will h ave U d :ontact 


Anthony P. DiClemente 
Chief, Digital Evidence Section 
Operational Tec hnology Division 


anthonv.didemente@ic.fbLaov 


— Oiigihal Message 

From; 1 

Sent: Monday, June 19, 2006 3:15 PM 

To: OICLEMEhTTE, ANTHONY P. (OTD) (FBI); 

Subject: FW: Supplemental procedures 

Importance: High 


RECORDI I 


Two very important tasks listed ^low. The most critical is the July 1 , to have started an audit, of the 
Red Wolf, 


We share the use of 


Isystems (see below for details). 


^d probably should respond jointly on that one. Do you see a need 


115 







to coo rdinate the response on the other systems. 
I Also note the Sept deadline on 


Your thoughts? 


Assistant Section Chief 

Electronic Surveilfance Technology Section 

QpRrafionat Tftchnnlnf^y Orvision 


b2 

b6 

b7C 

b7E 


Ip 


Monday. June 19. 2QQ6 1Q;27 AM 


— Original M jsssaoe 
From; 

Sent: 

To: 

Cc: _ 

Subject: fW: Supplemental procedures 

Importance: High 


SECRE T - 

RECORD[ 


Have the below 2 items been logged as "to do" so that we can track to completion? 


(4) No la ter than September 1; 2006, the FBI will provide a mechanism for all personnel with 

I to receive notice of^ahd have the ability to review, [ 


access to 


and 


K 



The status of the audit will be reported to OIPR no later than September 15, 2006, which 
information OIPR shall forward to the Court no later than October 1, 2006. 


Original Message — 

From: f 

Sent; 

To: 


Cc: 

Subject: 


1 


riTr=9E wiTir:»iEbfl 




RE: Supplemental procedures 


SENSITIVE BUT UNCLASSIFIED 





NON-RECORD 


^ 1 ! am inserting your sug gested changes (from your other e-mali) and that redline/strickout draft will be 

circulated to our folks in 0!PR & | l ivilf then prepare a final version which will be sent to you folks - probably 
Thrusday afternoon • - 


h2 

b6 

b7C 

b7E 



■Origi nal Message — 

Wednesday. June 14, 2006 8:14 AM 




Subject: Supplemenial procedures 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


From: 

Sent; 

To: 

Cc: 


Can we clarify something on the supplemental procedures. The recommendation to have done by September 1 
the ability to have notice of and access supplemental procedures -- 1 think there have been discussions wit h OIPR 
that this w ill entail l ~ ' _ i 

JIc 


] is that fair to say - 1 am basing this on conversations with[ 


]and[ 


so I want 

to make sure we are all on the same page in this respect - that we can g^t this 3one by September 1 but only with 
the assistance of OIPR. 


Secondly, when v re..discussedJher 
said that we were(_ 


because the recommendation about 


Tat the meeting. I thought we had 
iMavbe I misundejstOQd - 


But in either event, OIPR's efforts are crucial. Both I l and I [have said that the September 1 deadline is 

workable provided there is a mechanism developed whereby the systems can get the supplemental procedures. 
So can we have some confirmation o nthis issue that OIPR, in the course of downloa ding the final FISAs . will 
make this informatio navailable, in whatever manner you have already discussed with i H 


Thanks f~~1 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 








118 




DECLASSIFIED BY 60322 UC/LP/STP/ JCF 
ON 04-09-2009 


To: 

Subject: 


FW: Response to Supplemental Procedures 


£iease review the following answers in red to issues r aised in the suonfemen tai procedures communication from 
[The team will address your more recent e-mail re t n a separate communication. 


QTD/ESTS/TICTU 


b2 

b6 

b7C 

b7E 


-Original Message 


Fromj 

Sent: 

To: 

Cc: 

Subject: 


f 


] 


^Ttiursdav. Jiina ll. 2QQ6 5:15 P^m 


[ 


Response to Supplemental Procedures 


Ol— v^rv^ I 

RECORD f 




S E CRE T 

record! ~ 

□ 

Please review our response to your questions below. I've pieced together various parts of your original 
correspondence. 

From T I 

Gents, 

i ^njle.d-a.m.eel[n.CLwith the.fcont office this afternoon and it seems the essential RW questions toJje.answered 
are these:! 

I I would there De aocfmonai costs to incorporate 

changes and how m uch? It w as generally agreed the audit procedures mentioned below needs to be handled by field 
office/F SIHQ and no l T er RW. Are these assumptions correct? Short response time on this (tomorrow). See 
I f me if there are questions. Thanks. 


Original Appoin tment • 

From: I ~l On Behalf Of I 1 

Sent: Wednesday, June 21, 2006 8:52 AM 

To: I 

TFBT5 

Subject: Updated; RE: Supplemental procedures 

When; Wednesday, June 21, 2006 i;30 PM-2:00 PM (GMT-05:00) Eastern Time (US & Canada), 

Where: 

I d on't understand how we, the people that p rovi de tech nical capability, satisfy an audit request that deals with 
,the| — I 

r ls get together with me at 4 PM today to discuss how we satisfy this request. 



Thanks I 
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From; 

Sent: 

To: 

Cc: 

Subject; 


DICLEMENTE, ANTHONY P. (OTD) (FBI) 
Tuesday. June 20. 2006 10:14 AM 


Supplemental procedures 


h2 

he 

hic 

hlK 


" ^ORET - 

RECORpf 


i will have l 1 initiate the a udit oi \ \ agree w/con ductina a joint audit ot i 1 - 1 wiil have DC I C ontact 

you to coordinate. 1 will have l I coordinate w; | b n the final submission to Lynn Pierce, 

Anthony P. DiCtemente 
Chief, Digital Evidence Section 
Operational Technology Division 
(703) 985-1204 
anthonv.diclemente@ic.fbi.gov 


Original Message — 

From: If OTD^ (FBI) 

Sent: Monday, June 19, 2006 3:15 PM 

To: DICIEMENTE, ANTHONY P. (OTD) (FBI); I I 

Subject: FW: Supplemental procedures 

Importance: High 


SE C RET 

RECORD[ 


Tony l I 

Two very important tasks listed ^iow^ The most critical is the July 1, to have started an audit, of the 
Red Wolf, 


and 


Jsys terns (see below for details). 


We[ 


Jnd probably should respond jointly on that one. Do you see a need 


to coordinate the response on the ot her syste ms, 
Also note the Sept deadline or] 


Your t houghts? 


Assistant feeclion Chief 

Electronic Surveillance Technology Section 

Operational Technology Division 


Original Message- 

From: 




Sent: Monday. June 19. iu:z/ Am 

To: 

Cc: 


Subject: FW: Supplemental procedures 

Importance: High 


-a gORCT - 








Michael, 

Have the below 2 items been logged as "to do" so that we can track to completion? 


(4) No la ter than Se ptembe r 1, 2006, the FBI will provide a mechanism for all personnel with 
access to I V td l I to receive notice of, and have the ability to review, all supplemental 

minimization procedures that may apply to an. authorized FISA eo^ 


(5) No later than July 1, 2006, t he FBI will commence an audit of thej 
Wolf. l 1 1 h nd |_ Zjdatabases to confirm: 

(a)l ' 


Red 





The status of the audit will be reported to OIPR no later than September 15, 2006, which 
information OIPR shall forward to the Court no later than October 1, 2006. 
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/ 


/ 







ALL INFOEHATION COWTAIHED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 


DATE: 04-20-2009 

CLASSIFIED BY 60322 UC/LP/STP/JCF 
REASON: 1.4 (c) ' 

DECLASSIFY OH: Q4-20-2C34 


From; j | 

Sent: Tuesday, June 27. 2Q0B 10:40 AM 

To: I - I b6 

Subject: Accomplishments for the last six months, b7c 


UNCLASSIFIED 

NON.RECQRD 



After review my records this is what I came up with. 


1) O ngoing su pport forf 
— lanc i 


from[ 


]Major Casel 


land preparing the data for court proceedings. 


] Providing onsite training and[ 


2) Providing Red Wolf data recovery for 

3) Assisting 



4) Assisting 


b2 

b7E 


n preparing Red Wolf Data for Trial 


in resolvir^g[ 


Red wolf media 


anc{ 


5) Ongoing support with 

6) Ongoing Support with[ 


and[ 
in' 


for compatibility with Red Wolf 


hi 

b2 

b7E 


Jo be compatible with Red Wolf 


7) Conversion o i ~l "or active investigatiQn.irC 

8) Geherif support of| 


Let me know if you need more information. 
Thanks 


b6 

b7C 


UNCLASSIFIED 









DATT: 06-22-2009 

CLASSIFIED- BY' 60322 UC/LP/STP/JCF 
REASON: 1.4 (c) 

DECLASSIFY ON: 06-22-2034 


ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 


From: 

Sent: 

To: 

Cc: 

Subject: 


Thifrsrtav .liinP^Q 19-49 PM 

(FB\) 


i 


hW: Kesponse to yuppiementaj Procedures 


bl 

b2 

b6 

b7C 


SEBffe 

RECORD 


In vnn did nnt npA TiCTU^c; rARpnnse last week, I am resending it re the emailing-you forwarded to me today: 

1 1 will explain the 0!G request- {it is different) to you tomorrow. Thanks. 


•OrigInalMessage — 


From: 

Sent: 

To: 

Subject: 


I 


Thurisdav. June 22. 2006 6:1^ M 

' 

FW: Response toSupplemental. Pro^dures 



record[ 


Responses in red below. We will work on answering your recent email fd 


— Original Messa ge — - . ~ 

From: | 

Sent: Thursday, June 22, 2006 5:15 PM 

To: I 1 

Cc: I 

Subject: 


Response to supplemental Procedures 


recordC 


RECORD 268-HQ-1 409178 

Please review our response to your questions below. I've pieced together various parts of your original 
correspondence. 

From I 1 


S^pRg.T 


5 








ALL IHFORHATIOH CCST^INED 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 



DATE: 06-22-2009 

CLASSIFIED BY 60322 UC/LP/STP/ JCF 
REASON: 1.4 (c) 

DECLASSIFY ON: 06-22-2034 


From: 

Sent: 

To: 

Subject: 


l(FBI) 

I hursdav. June ^:1TPM 

RE; Response to Supplemental Procedures 


R^O^pf 


bl 

b2 

b6 

b7C 


Well talk tomorrow. . This is getting more difficult as we speak. 


Assistant Sectfon Chief 

Electronic Surveillance Technology Section 

Operational Techno logy Division 


703-632-6300 


(S) 


Original Message — 

From: 

Sent: 

To: 

Cc: 

Subject: 


] 


Thursday, June 29, 2006 12:42 PM 
ELLIOTT, MICHAEL T. fOTD^ (FBD 


TWTTSsponseToTup^ 


SlBgtfET 

recordI 


In racia uaij did_nnt np.t TinTi j*r rp.sr^rjriKfi last Week, 1 am resending it re the emailing you forwarded to me today: 

will explain the OIG request (it is different) to you tomorrow. Thanks. 


Original Message 

From: 

Sent: 

To: 

Subject: 


] 


Thursday, June 22, 2006 6:32 PM 

l (FBl) 

FW: Response to Supplemental Prcxiedures 


iS) 


■Responsesin red below: We wilt work on answering your recent email ra 


Original 


59 








EMPTIQN 1 




A- 


■ • ■ ■ b2 

SENSITIVE BUT UNCLASS FIED b6 

RECORCl hlC 

b7E 



24 







FOR DCS 5000 / REDWOLF SYSTEM ADMINISTRATORS - Please provide any special 

1 ^ NO LATER THAN MONDAY 24 JULY 


\ such as 


2006 


ELSUR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Operational Technology Division (OTD) 

ERF. I I 




SENSITIVE BUT UNCLASSIFIED 








ALl rWFORHATIQU COHTAI.HED 
HERIIH IS UNCLASSIFIED . . ■ 

DATE 04-1U-200S BY 60322 UC/LP/STP/JCF' 

: h2 
b6 ■ 
b7C 



Cc; 


Subject: RE: DCS 5000 /RedWolfl 


SENSITIVE BUT UNCLASSIFIED 
RECORD I 


b2 

be 

b7C 

b7E 


The email below notified the fielcLof the deployment of a procedure to 


phich they wanted exempted from the process 

that they should notify us by 24 Jul 06. To date we have received such requests from less than a 
dozen sites. 


Please note - This procedure will be activated field wide beginning tomorrow. 

This is your last chance... If you have no special configuration requirements - an email so stating 
would be appreciated. 


Thanx 


ELSUR Technology Management Unit (ETMU) 
Electronic Surveillance Technology Section (ESTS) 
Operational Technology Division (OTD) 

ERF.I 


Original Message — 

From: I I 

Sent: ■ Wednesday. July 19, 2006 8:45 AM 

To; 


16 






ALL .IHFORHAtlON CONTAIHJD 

HEREIN. IS TJNCLASSIFIED 

DATE 04-10-2009 BY- 60322 . UC/LP/STP/JOF 


From: 

Sent: 

To: 

Subject: 


Thursday. July 27, 2006 9:55 A M 




FW: EC review for Data system legality issues 


b6 

. hlC 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


recall we dfscussed this back in early June, do you have any email records or other notes of our views? 
As I recall, the process is tof 


NSLB's concern is that because OiPR considers call session data {they call "metadata") to be subject to the standard 
minimization procedures (SMP), anytime that data is c opied and put into another "system" it must done in compliance with ;^2 
the SMP. For example, becausef^ I for communications intercepted pursuant to FISA coverage is 

loaded intol 


.b5 

b6 

b7C 

b7E 


untortunateiy, if[ 


|is not a separate "database" but )t's more akin to a copy or report of the l 
IS suDject to Minimization, then before a cqpv or report can be produced it must be properly 


minimized-- It may be more useful to deem the 


t 


Jrom RedWolf or RedWolf active 


storage) 


'Original Message 


From: 

Sent: 

To: 

Subject: 


t 


Thursday, July 27. 2006 S;13 AM . 


FW: EC review.for Data system legality issues 


UNCLASSIFIED 

NON-RECORD 


are you familiar with the pr oposecT 
UQ you understand t he proposed l 


have questio ns about l 

lis functioning 


31 


b roposed for use b\L , | in th^ 
J In essence, | | SHo not^ 


1 hilt aciHa irrxm iWu 




3 


Policy & Training Unit 
National Security Law Branch 

I 


no Tina out wneiner i p r | Vave aooressea aTiv~6f tnis yet. 


— Original Mess age — . - • 

From: i ^ 

Sent: Wednesday. July 26, 2006 12:26 PM 


Subject: 


TW: tL review ror Data system legality issues • 


' U 






UNCLASSIFIED 

NON-RECORD 


b7C 

b7E 


Th ank you for vour assistance. He re is some more information that i collected earlier regarding 
and! I Please let me know what other type of. information is needed 


Again, much appreciated. 


— Originaj Mess age — 

From: L I 

Sent: Tuesday^ June 13, 2Q06 2:50 PM 

To; 

Cc: 


y (FBI) 


Subject: FVV: EC review for Data system legality issues 

UNCLASSIFIED 

NON-RECORD 


Hopefully one or both of you can help us out with our purchase request as it has been lanauishinq ”in the_aDDrQval 
.process" for a long time. My original immediate EC went out 3/14/2006 L 


followed with a specific mone tory reque st EC dated 4/20/2006 helow^ read the email' chain for 

has legality concerns rega rding I I t need someone 


background info. Apparently.^ 

(hopefully one of you guys) to*pass ori’the following information to[ 


Is Office so his concerns can be alleviated: 


] As the name implies, it is simply a[ 



In thaF 


js_eRSP.ntia( fpr.^iirl 


1 Tha imnortant htnhiinhts of this email ■ 


(4^ Tha.svstem will coslijetweenf 


to build (per ERF). The system can/will.be used for othei j [ 


clarification is needed. Thank you. 


once the major case is complete. Please let me know if further information- or 


■Original Message 


From: 

Sent: 

ToJ 

Subject: 


i 


Tuesday. June 13. 2006 12:2 4 PM 


FW: EC review for Data system legality Issues 


12 






UNCLASSIFIED 

NON-RECQRD 


b2 

b6 

b7C 

b7E 


See below. It is either or l 

information about the system, in order to get the ball rolling. 


] I will follow up. in the interim, maybe i can get some more detailed 


Original Mess age 

From: I 

Sent: limp n?_ 10^41 am 

To: 

Cc: 

Subject: 


FW: EC review for Data system legality i^ues 


UNCLASSIFIED 

NON-RECORD 


Please find attached the document. Your review is much appreciated. I definitely recommend that you call 
the field. He Is the one that knows the most about the particulars of the. system. His number is listed betoW 

I l emailed me yesterday with the following: 


Please advise me on who in this email chain 1 should talk to regarding, the 


purchas e? It is not al 

i What I mean W 


in 


]iAanks. 


--—.Original 

From: I 

Sent: Friday. Mav 26. 7QQ6 10:57 AM 

To: I I 

Subject: EC review for Data system legality issues 


UNCLASSIFIED 

NON-RECORD 


l i know that you are i n the Litiaatioh unit now-b ut it is my understanding that you are the one with the breath of 
knowledge when it comes. to l I | f licked this back for OGC to look at it for data system legality issues. 


The SSA is 


]and the individual from the 


knows the particulars with regard to this-system. 

Please let me know if you will be able to review this, (t would be greatly appreciated. If you are not able- to do this, please 
let me know who else may be able to. . 


Thank you. 


13 





ft 


— Original Messa ge 

From: I I 

Sent: Thursday, May 25, 2006 9; SO AM 

To- I I 

Subject; 

UNCLASSIFIED 
NON-RECORD ■ 


h2 

■be 

b7C 


CZD 

Per ari email fr nrrJ H ast week, | I returned this request because he wanted legal to review due to | | 

legality issues. | [ said you needed the electronic version o f the ec in order to forward it to the right person in Legal. 
Here is the request. Let me know what else you want. | | s desperately waiting for this as they are taking up space in 
ERF'S offices and starting to ge t complaints, etc. If you can let me know who you are forwarding it to I will follow up with , 
them too. Thanks, P i 


UNCLASSIFIED 


UNCLASSIFIED.. 


' UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 



04202006 request 
for money for... 


SENSITIVE BUT UNCLASSIFIED 
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FEDERAL BUREAU OF INVESTIGATION 
FOlPA 

DELETED PAGE INFORMATION SHEET 
Serial Description ~ COVER SHEET 


Total Deleted Page(s) - 11 
Page 228 ~ Duplicate 
Page 229 ~ Duplicate 
Page 230 ~ Duplicate 
Page 231 ~ Duplicate 
Page 232 ~ Duplicate 
Page 337 ~ Duplicate 
Page 338 ~ Duplicate 
Page 353 ~ Duplicate 
Page 354 ~ Duplicate 
Page 402 ~ Duplicate 
Page 403 ~ Duplicate 


! 

i 


xxxxxxxxxxxxxxxxxxxxxxxx 

)bo(xxxxl?®xx&xxxxxx)^ 



ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 01-06-2009 BY 60322 UC/LP/STP/JCF 


(OTP) (FBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


l(OTD) (FBI) 

Friday, February 03 . 2006 8:22 AM 

l (OGC) (FBI] 

g OTD) (FBI): ! 

RE: OGC Questions 


(OTD) (FBI) 


UNCLASSIFIED b2 

NON-RECORD b6 

b7C 


Original Message 

From: 

Sent: 

To: 


k oGC) (FBI) 
Thursday, February 02. 2006 12:16 PM 

I (OTD) 


Cc: 

Subject: 




FW; 


](OTD) (FBI);[ 


](OTD) (FBI); 


JOTD) (FBI);| 


Jitd) 


]0TD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


All— would you help me answer the below.questions, Please! 


1} Re: access decisions and who controls the operation of the system-e.g., who tells the field or the system 
administrator how they should determine who gets access to the system-in other words, who is the ultimate gate- 
keeper o f the system and its data> 

I If the que stion is who at! I tells the field how they should determine access - 1 suppose 
that would be the | j according to the system security plan (SSP) Guidelines and 

default privileges for the various roles on the system are described in the SSP. Special 
requirements(additional privileges) are determined/justified at the site level by the 


and 


2) Re: deletion of data-any record made of deletions. 


that a session has been deleted... We do not however currently 

.. Typically linguists do not deletel I- they reside on the system indefinitely. 


- this would alsc 


indicate 
such as 


hZ 

b6 

bVC 

b7E 


3) Re: auditing of pertinence markings and changes made to pertinence markings? What kind of a report would 
should show that pertinence marking changes have been made to a particular document or session? 


Thanks in advance-! 


— Original Message 

From: [ 

Sent: 

To: 


iuW^j 


~l 0GC) (FBI) 
av: Februa ry 02. 2QQ6 12:00 PM 


(OGC) (FBI) 


426 







Subject: RE; 

UNCLASSIFIED 

NON-RECORD 


Does each database have a program manager here at headquarters? Is that the person responsible for the operation 
of the system? Do they set any parameters on whai access should be-granted by the system administrator at the fielci 
office level? To the extent that below and in the course of your descriptions, you've made generalizations about who is 
granted access in a particular system, where does the information come from?’ 


At the field office level, will there be one system administrator for ail the databases, or does each database has its own 
system administrator? Do you know if they have to have certain qualifications, or are at a certain GS level? 


I am just trying to get a fee! for what reponsibilities for the database come from headquarters and what responsibilities 
are in the field. I am going to be sending an email to the field asking some of these questions of them, as to the 
minimization requirements, their use of markings,- deletions, etc., so I am just trying to figure out what information the 
field should have versus'what information headquarters has. F or ins tance, g iven that ! I 

p Or inf where would 1 find out if data is ever 
t In othar wnrds. in tn/ino to find out if the 


Thanks. 



Driq inal Message- 


From: 

Sent: 

To: 

Subject: RE: 


loGC) (FBI) 


Wednesday, February 01, 2 006 12:52 PM 

"n (OGC) (FBI) 


UNCLASSIFIED 

NON-RECORD 


b2 

b6 

b7C 

b?E 


See response in red and black below- 
— Original Message-—- 

From: I ~ [ OGQ (FBI) 

Sen t: We dnesday. February 01, 2006 11:54 AM 

To: I _ ~ (OGa (FBI) 

Subject: RE; 

UNCLASSIFIED 

NON-RECORD 


Okay. Thanks. 

I Ha lso had a question as to why we would delete from 

not being in place, since it might otherwise leave a misimpression, when we say there are | 
tha t they are being used. As it was written --I thought it said more than necessary. As a pure factual matter 
the} I 


is not clear. If you say its not used, then it 
would be i n our interest to say why not AND why we think operating it without auditing is okay. But simply 
saving thatl \ 

Also, I [ wants to know, the following about each database ^ exactly what criteria are used to determine who 
ge ts_acc6 ss and who applies those criteria; also whether there is a provision for users to have been trained in 
the l l and whether there is any form or s omethin g to that effect that an authorized user has to sign 
acknowledging that they've read or know' the | | 

Neither I nor OTO can answer the } | training/certification question-ff there is a policy requiring such, it 


b2 

b6 

b7C 

b7E 


427 



b2 

b4 

b7E 

AS to “what criteria are used to determine who gets access and who applies those criteria:*' 

Foi "" The systems administrator for the filed office I I system 


For RedWolf : The case agent and the system administrat ors in the 
office 'where the audio is collected have access to thel 


b2 

h4 

b7E 



Also, as to Red Wolf, do we have any idea of the number of authorized users or Is that something the field 
offices would have to provide. The field offices vyill have to give office specific numbers 

Lastly, are Red Woof.1 I ~ 

I RedWoif systems are 

generan>^| 


desktop)* are they stand alone computers in the field offices, or accessed from the same computer? Do you 
happen to know? 


428 






Thanks, as always. 


— Original Mess age — 

From! I I (OGC) (FBI) 

Sent: Wednesday. February 01. 20 06 ll:4q AM 

To: I fcoGC) (FBI) 

Subject: TfE! 

UNCLASSIFIED 

NON-RECORD 


I I mav be used to | t dial-up {i.e., modem) internet account activlty--tbis would 

include any activity engaged in using this Internet account, to include ennail, chat, websurfing, etc 

— Original Messa ge — . 

From: I I fOGC) (FBI) 

Sent: Wednesday. Febru ary 01. 2006 11:32 AM 

To: I I fOGC) (FBI) 

Subject: RE: 

UNCLASSIFIED 

NON-RECORD 


b2 

be 

b7C 

b7E 


I I vou answered yes to this Question b elow in a prior email but didn't really explain I Lants me 
to define modem intercept in th a I descriotion. How would you put { I 

internet connection" into a form that explains exactly what form this is - what does the data look like. It 
is just IP addresses, websites, or what? I guess I still don't understand what it is. 

I I went over ail of these mem os, and s he had me make your changes on the Red Wolf d escriptioii . 
and some of your changes on th d I description. and i am making your changes on the | \ 

description, 


— Original Messa ge — 

From: I l lOGC) (FBI) b2 

Sent: Tuesday, January 24, 2006 5:59 PM b6 

To: I T oGC) (FBI) i, 7 C 

Subject: RE: 

UNCLASSIFIED 

NON-RECORD 


So it would. inc lude the l l and if so, in what form, copies of the 

I P This is different from your emails, correct? (I told you 1 am technologically 

challenged) 


- — -Original Mess age — 

From: I l lQGCUFBI) , 

Sent: Tuesday. January 24, 2006 3:20 PM 

To: I I (OGC) (FBI) 

Subject; kE! 

UNCLASSIFIED 

NON-RECORD 


— Original Message- 


429 





From; I I rOGG (FBI) 

Sent: Tuesday, January 24, 2006 2:25 PM 

To: I I fOGH (FBI) 

Subject: 

UNCLASSIFIED 

NON-RECORD 


What is a computer modem intercept? 

Thx! ! 


UNCLASSIFJED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 

UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 




Subject: FW: Follow up to 12/21/05 EC requesting information about FBI Databases containing FISA 

information 


r b6 

blC 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Original Messa ge — 

From: f | (FBI) 

Sent; Friday, February Q3. 200 6 12 :33 PM 

To: I — — IFB UJ „ l (FBI) 

Cc: I t FBI) 

Subject: RE: Follow up to 12/21/05 EC requesting information about FBI Databases containing FISA information 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



1) Does ] "I control access to 
access?? 



If yes, Who and how is it decided who gets 



Does | "I control 


access lo REDWOLF? 


If yes, Who and how is it decided who gets access?? 



— Original Message — 

From: I ' I fOGO (FBD . 

Sent: Friday, February 03, 2006 10:18 AM 

To: FBI ALLCDCsi PBI SAC s 

Cc! I j j (Qgq (FBI); I n ;OGC) (FBI); 

(OGC) (FBI) 

Subject: Follow up to 12/21/05 EC requesting information about FBI Databases containing FISA information 



:b2 

b6 

hlC 

hlE 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



Therefore, with respect to each of the five listed databases - 1 | Red Wolf, 

please provide: 

1) the identity of the system administrator 

2) the identity of the parties granting access to the database - the system administrator, the case agent, or some other 
person 
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""3) the criteria for granting access to the database 

4) whether minimization training is a prerequisite to becoming an authorized user 

5) whether there is some documentation as to the minimization training of the users 

6) whether the marking capacity of the database is being used (this is a subjective analysis but I would think it would 
be possible to generalize as to whether in fact users of the database are making use of the capacity to mark data on a 
consistent basis, sometimes, rarely, never, etc.) — of particular. concern is the privilege marking, so if the privilege 
marking is being used, we'd like to know 

7) whether the deletion capacity of the database is being used (again, this is a subjective analysis but probably subject 
to generalizations that the deletion capacity is being used consistently, sometimes, rarely, never, etc.) - again, of 
particular concern is the privilege marking so if privileged communications are being deleted, we'd like to know 

8) any other information that you think would be helpful to us in determining whether in fact authorized users of the 
databases are aware of the obligation to minimize and whether in fact minimization is taking place with respect to 
these databases. 

To the extent that your previous response answers these questions, please just reference that response. I think 
that the earlier EC focused access questions more on who had access rather than the criteria, so I don't think this 
request is redundant. But, again, to the extent you may. have already answered the access questions set forth above, 
just reference your previous EC. We are not trying to be duplicative. 

Ple ase provide resp onses to I | by the COB Friday, February 10, 2006. Questions can be directed 

to me - I [ As always, your cooperation is greatly appreciated. 

Thanks. □ 


SENSITIVE BUT UNCLASSIFIED 
SENSITIVE BUT UNCLASSIFIED . 
SENSmVE BUT UNCLASSIFIED 


b2 

h6 

hlC 


425 



r 


VOG is an 


illows for 


As far as speaking to you in-service you need to check with my program] 
Thanks 



— Original Mess age — 

From: I l (RMDTfFBI) 

Senfc Friday, February 03, 2006 XI: 19 AM 

To: I I (OTD) (FBI) 

Subject: RE: DUPUCATING EQUIPMENT 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I don’t want a presentation that goes over their heads. So can we do this? Talk to them about duplicating 
cassettes I know they all do that. And ask them if they have needed to convert the others,. MOs to CD/DVDs 

What is VOG? 

— Original Messa ge — . 

From: f ~V aTD^ CFBI) 

Sent: Fphmarv 01 2006 10:43 AM 

To: 1 l (RMD^ (FBI) 

Subject: RE; DUPLICATING EQUIPMENT 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


TheYo llow'tng offices have I ' 
I D eployment i s pendiniTtoj 
system to reolace l 


I mp to CD/DVD converters, f 
In time as budget permits all office wn 


This is how an 


works. 


The 


will) of what is on a 



I] consists of a l 
The purpose of andl 


is create 


[and a 
lif you 



security cl assification information. This is normally secret. It also contains ths 
end times.! 









to CD or DVD. The CD or DVD are then labeled and ejected from the disk publisher. 



.which is compatible with Redwolf. 


1 a m also the team leader thef 
Thanks 


jthat provides FISA data recovery services 

jand Redwolf. b6 

.b7C 


b7E 




L 


— Original Messa^ 

From: 

Sent; 

To: 

Subject: 


F|i^ 


](RMD) (FBI) 

February p 3. 2006 10:16 AM 
^(OTD) (FBI) 


RE: DUPLICATING EQUIPMENT 


UNCLASSIFIED 

NON-RECORD 


. Definitely the cassetts. What offices have you provided converters to? 


— Original Mess age — , 

From: I I fOTP^ (FBI) ■ 

Sent: Friday, February 03, 2006 10:07 AM 

To: I k mO) (FBI) 

Subject: RE: DUPUCATING EQUIPMENT 

UNCLASSIFIED 

NON-RECORD 




What type of duplicating equipment? The only true duplicators that my group provides are 
cassette duplicators. 


In the line of converters we 

I — 


provide analog audio to CD/DV D. We conve rt FISA MO‘s from l 1 
jRed Wolf to CD/DVD including 


Thanks 


b2 

b6 

b7C 

b7E 


— Original Message — 

From; . I I fRMD^ (FBI) 

Sent: Thursday. Februa ry 02, 2006 2:58 PM 

To; ! I(OTD) (FBI) 

Subject: ' DUPLl ' CA TI N g'^UIPMEm- 

UNCLASSIFIED 

NON-RECORD 


Do you now handle all the duplicating equipment? 
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V 


b6 

b7C 


Cc: 


Subject: 





ban: 

IL 


IfFBin 


IfFBIVI 

^FBM: 


rcoNii 


I^FRm 

1 

T ifFBiir 


_1(FBI); 

lfF8l);| 1 



n(FBl) 

1 

KFBI); 

Fn ^ 

_JFBI) 


DCS 5000 C&A 


SENSITIVE BUT UNCLASSIFIED 
NON->RECQRD 


h2 

b7E 


The DCS 5000 / RedWolf system has received Approval To Operate (ATO) from SecD based on a 
type certification and accreditation process. I will be providing copies of all relevant C&A 
documentation, including the System Security Plan, the User’s Guide and Privileged User’s Guide, 
and the Implementation/Migration Plan which will lay out the processes and timetable for deploying 
the approved security configuration and policies to the field systems. 

In preparation for this deployment, request that Field Office TA/TS/TTA personnel review the 
attached spreadsheet containing key support personnel. It lists 

System Administrators/Alternates - those who are primarily responsible for day to day administration 
of the system, adding new users, etc. 



Software POCs - those individuals (government) to whom we should send any software updates for 
the system. 

Local System Security Managers - Those personnel (government) who will be responsible for the 
security of the system, to include validating user account requests, and reviewing local system audit 
logs. - more on that in a later email — we are working on some tools to simplify this process. 


Please verify that each position has someone assigned to it. The system administrator should not be 
a security manager- since part of the security manager's responsibilities include insuring that the 
system administrator is complying with appropriate guidelines. 


Also each facility should indicate any additional personnel requiring Privileged User access to the 
system - generally this vvould be anyone with Operating System access/// not application access. 


Privileged User accounts will be verified/validated by the 
accounts will be validated and managed locally. 


here at ITD. All standard user 


Please review and provide your input as soon as possible - There is a lot of work that has to be done, 
and we really do need to get it underway. 

Thanx 


b2 

be 

b7C 

b7E 
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From: 

Sent: 

To: 

Cc: 

Subject: 



DATE: 02-12-2009 

CLASSIFIED BY 60322 UC/LP/STP/ JCF 
PEASON: 

DECLASSI^ OM: 02-12-2034 


ALL INFOFKATIQH COHTAINED 
HEREI5T IS ^CLASSIFIED EXCEPT 
TpJHERE SHOTilE OTHERliJISE 


kOTD) (CON) 

Monday, March 27__^Q6 12:55 PM 

I fOTD) (FBI) 

T OTP) (FBI) 

FW: Further response to Court’s Order of December 9, 2005 




fr 


Record [ 


- is this s omething you can handle for 
I Thanks. 


DUE WEDNESDAY 3/29. Please discuss with 


b2 

b6 

hlC 

blE 


— Original Mess age 

From: I ^ OTD)(CON) On Behalf Of l t OTD) (FBI) 

Sent: MQndav._March 27. .2006 12:51 PM 

To: i t OTD) (CON) 

Subject: f=W: Further respond to Court's Order of December 9, 2005 

RECORD] 


As discussed. 


Original Message — 

From: [ 

Sent: 

To: 

Cc* 

(UID) (FBI) 

Subject: RE: Further response to Courts Order of December 9, 2005 


(OTD) (FBI) 

fhursdav, March 23, ^006 1:42 PM 

I tn-PK FBndl 

I | OTD) (FBI)I, 


(FBiT 


Irm^ fFRn 

1)TD)1fB 1);1 tOGC) 


SECRET 

RECORD] i 


b2 

be 

b7C 

b7E 


.The attached e-mail has several questions in follow-up to the FISA Court's Order of December 9, 2005. A copy of the 
response to that order is being routed thru BuMailto each of you so you may remind yourselves of you earlier 
responses. 

The Questions and responsible parties for answers are: 

I I TICTU (1 ) how does t he info get into the datab ases - e.a.. dis c or automatic electronic transfer from 

the carrier/ISP or the listening post to I I whlch inputs it into l P ete ??? [this is the least important but 

they were having trouble visualizing how this work] 


257 







s 


This is where the last vugraph may be inserted with descriptor... Electronic transfer from access system 

I TICTU (2) some screen shots for each system - so they can see what we mean by marking 

something non-pertinent, privileged, etc, as well as other features of each system - also help show what 
subsequent users see when they pull up a piece of info which another analyst has already reviewed 

You can use the diced screen shoots from the third vugraph or using the training material. . . . 

TICTU (3) perhaps an example of what an audit trail print out would look like for each system 

The audit write up has the screen shot for the history.. ..should add examples of login, etc. 


h2 

blE 


(SJ 


TICTU (4) for Red Wolf - they did not understand re the 'list'* "party'* re "session". - what does it mean 

to be ifi cluded in these "lists", sessions, etc 

I (5) they want more specifics re how the National Archive Retention works vis-a-vis the 1 1 yrs 


FBI retention 


[ 


N/A 

N/A 


] TICTU (6) same issue re "back up" retention for as long as "operationally necessary" 
(7) specifics re how destruction is accomplished. 


(8) some other minor but specific issues, e.gi- ra 


which we could not answer. 


Please provide responses back tc j l and I by Wednesday 
assist in editina. It is our desire to do a briefinq to the court ot 


. March 29. 2006. Copy to[ 


]so she may 


editing. It is our desire to do a briefing to the court on these matters. So. question 2 may be more 
appropriate to have in hard copy. My thought would be to do a demo here at ERF, but we'll save that play for later. 


Questions call me on 

ZZI 


bl 

b2 

b6 

b7C 

b7E 


Qri qnal -Messaag- 


jnqi 

From: j oJO) (FBI) 

Sent: Wednesday/ March 22, 2006 10:42 AM 

To: 1 lOTD) fFBI^r 

Cc: ] 


JTSSC 


IOTD)(p 
5 (FBI)II 


Subject: FW: Further response to Court's Order of December 9, 2005 


iQTD) (FBI) 
^(OGC) (FBI) 


RECORD 


[ 


Can you coordinate OTD responses (where applicable) to the below questions with 


1 


— Qri qinal Message 

From: \ |(OGC)(OGA) 

Sent: Wednesday. March 12. 2006 8:38 AM 

TO! I kOGC).fFBD;r 


b2 

be 

b7C 

b?E 


Cc: [ 




T 



l(CyD) (FBI) 




(OGC) 


OGC) (OGA)[ 


Subject: RE: Further response to Court's Order of December 9, 2005 
SECRET 


^C),(OGA). 


](OGC) (FBI); 


(OGC) (FBI) 


]0GC) (OGA); 


record[ 
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(S) 


]and I met with the Court's advisors on 3/17 re their reaction to the partial response re the databases ' 


they were generally impressed but found it a little "heavy” to understand - based on their comments a futher 
SHORT factual declaration might be advisable - here are the issues that might be in such a supplemental 
declaration: 

(1 ) how does th e info get into the datab ases - e o— dis c or automatic electronic transfer from the carrier/ISP or the 

listening post t dj k hich inputs it into ! ^ etc ??? [this is the least important but they were having 

trouble visualizing how this work] 

(2) some screen shots for each system - so they can see what we mean by marking something non-pertinent, 
privileged, etc, as well as other features of each system - also help show what subsequent users see when they 
pull up a piece of info which another analyst has already reviewed 

(3) perhaps an example of what an audit trail print out would look like for each system 

(4) for Red Wolf - they did not understand re the "list” "party" re "session” • what does it mean to be included in 
these "lists", sessions, etc 

(5) they want more specifics re how the National Archive Retention worksl 


(6) same issue re "back up" retention for as long as "operationally necessary 

(7) specifics re how destruction is accomplished!- ■ 

(8) some other minor but specific jssuesre.g., r€ phich we could not answer. 


Can we get together to discuss how to re spond - we like the idea of the screen shots - but do not want to get into 
another huge declaration. Please contact P" ~b r myself re getting together re all this. In the meantime, I 

am working on a draft re the response re the other 2 issues in the Order which we hope to have to you perhaps as 
early as next week. 


Thanks 


— Original Message 

From: [~ 

SenJa 3 

To; l 


Cc: 


Subject: 



kECC^D[ 


loGC) (FBI) 
B5:« 


pesaay, riarcn u«, zuub 5:42 PM 
Jfnc;nfOGAVi ~ HfOGO (FBI);{ 
fFfini . ^(CvD) (FBI) 


3oGC) (FBI); 


]0TD), 


T 




KOGC) ( OGA) 


loGQ (OGA)f 


lOGC) (OGA); 


RE: Files from 


There is only going to be one docu ment th at is signed. Everyone is going to be 
day, I ^ilt be there around 10. | | ts presumably there all day| 


atl b t some point in the 
f is there around 2. 


-Original Message — 


From: | 


Sent: 

To: 

Cc: 

Subject: 


Wednesday, March u8. 2006 5:26 PM 
I nagC) (FBI)^ 


!^0) (FBI) 
l(QGQ (0 


FW: Flies iTonr n J 




(OGC) (OGA) 



RECORITOIPR0001 


|(OGC) (FBDf 


EvD) (FBI) 
□(OGC) (OGA)[ 


](OGC) (FBI); 
□(OGC) (OGA); 



-—Original Mes sage — 

From; I I (OGC) (OGA) 

Sent: Wednesday. March 08 2006 5:21 PM 

To: I p GC) (OGA) 


bl 

b2 

b6 

b7C 

b7E 


b2 

b6 

b7C 

b7E 
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Original Messafip — 

From: | 

Sent; 

To; 


Cc; 


]0GC) 


(FBI) 


Monday. August 07 . 2 006 10:33 AM 
nOGO fOGA>r 




?E1dI 




loGC) (FBI)[ 


](OGC) (FBI); 


(OGC) (FBI);I (QSQ (FBI) , , , , , 

](OG a fOGAU , IfOGCI fq GAI I IfQGQ rOGA^: | J 

. - iOGCM 


1 be 
^ b7C 




loGC) (FBI); 


|(OGC) COGA)i ~ 
^ ^IQGoTFBnT 


1 (C^ (OGA)[ 


](OGC) (FBI); 


Subject: 

QCQRET 

RECORD 99999-3333 


I. (OGC) (FBI) 

RE: Minimization and database issues which need attention ASAP 


](OGC) (FBI) 


loG O (OGA^: 


[sicsn^^n 


. koGM; 


OGA); 

^OGC) 


Please ask | | to raise these issues with ) { during their next meeting. 

I will ask | "[ about some of your issues, but I do not see a need for another survey at this time. 
Did you discuss these issues with th ^ CDC? 


b2 

•b6 

b7C 

b7E 


Original Message — 

From: 

Sent: 

To: 


t OGQ (OGA) 
Monday, August 07, 2006 9:12 AM 

□ (OGC) (FBi)^;; 


Cc: 


C 


(O.GC) (FBI) 


](OGC)(FBI)( 


T 


^ (OGC) I OGaU 1 (OGq (OGA);[; 

](OGC) fOGAl l K OGCHOGAI: ! 1 


(OGC) (OGA); 


Subject: Minimization and database issues which need attention ASAP 

■4 5ECRE - T - 


] (OGC) (FBI)( 


1(OGQ (OGA)f 


JOGC)(OGAy 


RECORD 99999-3333 




last weekf 


land I wer e out in [^ for the minimization and l H reviews (along with 


Ifrom OIPR) and several minimiztion issues were identified which we 


think need attention ASAP - in addition l l also asked me to ask about another database which he just learned 

about and which was not included in our database filing. 

be 


TheT 


Ifield office advised us that last year a n inspection team of some sort had critiqued them for not getting their 

Iwithin the requried 30 day period - because this was due to the case ^57^ 


a^nts being so busy they could not review th ^ ^ nd mark them up in time for ELSUR to proces s them, in 


October 2005 t he field office instituted a policy of having the ianouage specialists send one copy of evervl 
the case age nt 


CO 


to 

and 




to tile b LbUK people v\^o then automatically index^ed into l ] all to/from names from ev^ wire, 

1- this obviously bv-oasses the case aoent who under the SMP is supposed to make a 

I- a 


wireless or audi 

determination that.th j 
year ago we learned during th d I minimization review that the FBI was 
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bnd we mentioned that in the database filing -I biso confirmed this 


(11 where did this 30 dav rule re indexing Into l i come from - we had neveitieard of it before ??? 

(2) we believe we need to quickly survey alt the field offices to determine: 

(a) how they have responded to th is 3Q d ay rule - to make sure their practice conforms to the SMP; and 

(b) if any are actually indexing into l b ll to/from info from wire, wireless or audio coverages even when 

the case agent has not made the requried determination re FI. 

Several weeks ago when I was in | [ with I I doing tr ainino. on e of the monitors and the local computer guru 
described a feature re Red Wolf which I nad not heard of - in i I I again had described to me this same feature - 
which appears to be a I I associated with Red Wolf which I be lieve we have not described to the Cou rt - 

basicially they described how RW collects the data for the monitors to use -| | 


Also. l l advised that he had recently been told of another database catlec{ 


which we did not 


describe in our filings with the Court - apparently there also may be other databases using the ter 
(something) ” - • 

Can we find out more about this/these databases ??? 




Please advise how we can handle these matters quickly. Thank$[ 


] 











h2 

he 

hlC 

hlE 
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1 (OTP) (FBI) 


DECLASSIFIED BY 60322 UC/LP/STP/ JCF 
ON 02-12-2009 


From: 

Sent: 

To: 

Cc; 

Subject: 


RECORD 


r 


](OTD} (FBI) 


Tuesday, August 08 . 2006 3:44 PM 


DTD) (FBI); 


ToTD) (FBI) 
J^TD) (CON) 


RE: Minimization and database issues which need attention ASAP 


b2 

b6 

hlC 

hlZ 


The 
which contains 


cited below could be referring to the 


]and any transcripts. 


So for example, you will have a directory 


Where 


s the word perfect document containing the 


? directory on the RW 
and ultimately thef" 


AH | ~| are saved to a similar directory structure on the fileserver and while the space is not 
unlimited, 

-it is large and we have not had cause to see any] 


1 overwritten. 


The other possibility is that the 
number basis and also contains all|. 


refers to l I which is setup also on a case file 


... which have been pushed from the RW, 



Hope this helps ... 

Let me know if you need additional info. 



b2 

b6 

b7C 

b7E 


— Original Message 

From; I ~l rOGCHFBn 

Sent: Tu^rlav. AtioustOS. 20 06 9:59 AM 

to: I b lD UPBIbl t OTD)(FBI) 

Cc: I b TDHFBn l I fOToTfCON^ 

Subject: FW: Minimization and database issues which need attention ASAP 
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Importance; High 


■ occrec T 

recordI 


Gentlemen: 


Please advise re: the 


referenced below. 


Also does RW interface wit h the oth er system/prooram referenced below? Or are all call detail records pertaining to a 
RW collection forw arded tol Ifor upload intol I Those records would also stay in the_RW flocaLor 

arachnet?) correct] 

b2- 
b6 
b7C 
b7E 


(OGC) (FBI) 


— Original Message 

From: . t "I rOGCKFBIl 

Sent: Monday, August 07, 2006 1:37 PM ' 

To; I k OGQ (FBI): I t OCCKFBn: [ 

Subject; FW: Minimization and database issues which need attention ASAP 


RECORDj 


(1).fro m[ 


email below, are you familiar with what | ~| is describing in REDWOLF as a 


If so, how is access to the 
BUT - in 


handled? 


they indicated that the RW system also automatically I 



, also asked about the following: 

Also. ! b dvised that he had recently been told of another database called{ 


which we did ■ 


not describe in our filings with the Court - apparently there also may be other databases using the term 
(something) ” - - 


] 


I searched on our web and there appears to be a program with 
you have any other info on this? 


for call detail records. Do 


b2 

b6 

b7C 

b7E 


Original N fessage 

From: 

Sent: 

To: 




loGC) (FBI) 


Cc: 


Monday, August 07, 2006 10:33 AM 
i ~l fOGO IQGAVr 

(OGC) (FBI);[ 


KOGC) ( OGA);r 




](OGC) (FBI)£ 


](OGC) (FBI)[ 


rOGC)(OGAI;l ~ 

I rOGOrOGAir rOGO fOGAI: | KOGC) (OG^ 


]OGC) (0GA)£ 




(OGO(FBI); L 


- 1 ( 0 ^ 

KOGC) (FBI);| 




J(OGC) (OGA); 




TOGO (OGA 


JOGQ 
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Subject: 

SECRETT 

RECORO 



DATE: 02-02-2009 

ALL MFOI^TXOW CONTAINED CLASSIFIED . BY 60322 UC/LP/STP/JCF 
HEREIN IS UNCLASSIFIED EXCEPT REASON: 1.4 (c) 

■&JHERE SHOUN OTHERNISE . DECLASSIFY ON: 02-02-2034 


(FBI) 


3 


06 9:15 PM 
FRh , 







l/PRfI 



Mi 


J(OTD) ( FBITI 


RE: Forward deployed 


J (OTD) 

Tfbi) 


(FBI); 


bl 

b2 

b6 

b7C 

b7E 


b2 

b6 

b7 





From: 

Sent: 

To: 

Subject; 


:OTD) (FBI) 


DATE: 04-21-2009 ALL INFOBHATIOK COHTAIMED 

CLASSIFIED BY 60322 UC/LP/STPyiCF HEREIN IS UNCLASSIFIED EXCEPT 
REASON: 1.4 (c) UHERE SHOW OTHERWISE 

DECLASSIFY ON: 04-21-2034 


;OGC) (FBI) 


2:40 PM 
KOGC) (FBI) 


:OTD) (FBI); 


l(OTD) (FBI) 

FW: Red Wolf ELSUR System ' 


SECRET 
RECORD 202a 


This AUSA| jis also prosecuting the] [case and the judge in that case has indicated that may have to call be 

someone testify as to how RW collections work. The request is to identify who that person should be. b7c 

FYI: Co-counsel on the [ case apparently already has a flow-chart on how RW collections work--not sure who 
provided it-perhaps a local person... 

There are other CIPA proceedings in this' prosecution so the AUSA could handle this in CIPA if necessary to shows how 
the RW system collection conducts intercepts, stores, copies, how data is written to the MO, how data is reproduced on to 
removable media, etc has this been done before, does it have to been within a CIPA proceeding? 

lis the NSLB atty assigned to the professor case. -I left her a voice mail message. 


— Original Mess age- 

From: I 

Sent: Tht 

To: [~ 

Subject; Rec 

SECRET 
RECORD 202a 


([FBI) 

jav. Novem ber 02, 2006 2:05 PM 
^(OGC) (FBI) 

/oil EU;UR Siystem 



SSA 


indicated that you might be able to assist the FBI regarding the listed information. 



The prosecution, Assistant United States Attorney (AUSA )I has request ed that w e identify an expert that 

could testify if needed as an expert witness regarding the Red Wolf System. AUSA| [advised that he might be able 
to stipulate the information but would like to be ready if needed. 


When you get a chance can you please call me at 


>r SA 


□ERtVHbEROM: G-3 FBI Classification Guide G-3, dated 1/97, Foreign Counterintelfij 
DECL^sslR^;^^te^^^^ 1 ^ 

SECRET — 


fvistigations 


DERIVED FROM: G-3 FBI Classificati 

DECLASSIFICATION 

SECRET — 


fide G-3, dated 1/97, Forel 


iterinteiliqence Investiaations 
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From: 

Sent: 

To: 

Subject; 


I fFBI) 

Thursday, April 22. 2Q54 4:5 1 PM 

l(FB n 

Kb; bareauie Mig |dcs-3ooo/5000) 


UNCLASSIFIED 

NON-RECORD 


Thanks. 

MJ 


b2 

b6 

b7C 


Original Message — 

From! 

Sent: Thursday, April 22, 

(FBI) 
2004 1:14 PM 



Tol 

(FBI)j 

KFBi: 



l{FBI)| 

(CON);| 


(Fbl)l 


n (CON) — 



j[DCS-3000/5000) 


UNCLASSIFIED 

NON-RECORD 


All: You are cordially invited to attend a meeting not yet determined. 

Where; ERF 
When: May 3-7? 

Time: ? 

Subject: Develop capability to correlate CCC/CDC data for DCS-3000/5000 


Last Wednesday, I spoke with 


from 


land discussed the need to develop a sound, 

B will not be available next 

’ 


reliable solution to correlate the CDC/CCC data for the RedWolf and the DCS-3000,^ 

week, but the following week appears to be open. What day and time is best for eacnofyou during the week of May 3- 
7? Please send me your requests and make sure that you include more than one choice, I will coordinate what works 
best for the majority. Thanks so much. 


PS I [informed me thalj [have made the decision to begin developing "A Time Based 

Correiailbn" wr now. I don't have any details about now this algorithm is actually calculated. We can definitely get more 
specifics at our meeting. Is this the direction we wish to go, or are there other ideas? This is what we need to discuss. 
Please ponder on this. Thanks. 


Later, 
-c • 


UNCLASSIFIED 


864 




From: 

Sent: 

To: 


Subject: 



SENSITIVE BUT UNCLASSIFtED 
NON-RECORD 


We need to issue a tasking to 



to 


Institute a software patch that will provide the RedWolf System with the capability to monitor user actions within the 
application. Events to be monitored should include : Login , logout , Session open, session delete, change review status, 
forward session, transcript, as well as all other tasks generally associated with RedWolf user utilization of the system. 



The resulting Audit Trail Logs should be accessible only by system administrator level personnel 



SENSITIVE BUT UNCLASSIFIED 



758 



t 



SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Task Order 6^319 W for a not to exceed 


was sent td 


yesterday, June 9 for this patch. 


b2‘ 

b6 

b7C 

b7E 


Ori ginal l^lessaae 

From:! l(rTD) (FBI) 

Sent: Wednesday, June 0^2004 12:50 PM 
To;l 


(ITD) (FBI); 
(CON) 

Subject] 


Krrp) (FBi)J 


](ITD) (C0N)£ 




iTTD) (CON)l 


OTD) (FBI):r 


lifroy 


jTasking 


SENSITIVE BUT UNCLASSIFIED 
NON.RECORD 


We need to issue a tasking td 


to 


Institute a software patch that wilt provide the RedWolf System with the capability to monitor user actions within the 
application. Events to be monitored should include : Login , logout , Session open, session delete, change review • 
status, forward session, transcript, as well as all other tasks generally associated with RedWolf user utilization of the 
system. 

The resulting Audit Trail Logs should be accessible only by system administrator level personnel 


< 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 
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ALL lETFOI^TIOH COHTAIHED 

HEREIN IS UNCLASSIFIED 

DATE 02-19-2009 BY 60322 UC/LP/STP/JCF 


OTP) (FBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


l (FBI) 

Thursday. June 10 2004 2;09 PM 

J ITD) (FBI) 

i ntp^ (FBI) 

RedWolf redundant database 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


b2 

b6 

b7C 

b7E 


I'm sending this to both of you because I'm not sure I have the correct e-mail addresses! 


L-. Ulthouglj I 

\ |get a redundan 


is happy with the new system you are s ending. If po ssible, or if you have end of year mone y, could 


redundant database for our RedWolf System. Jhej |price tag is probably still less thar| ^four 


separate systems. This will assist with data recovery in the event or a lailure. Thanks again. 


SENSITIVE BUT UNCLASSIFIED 
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ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 02-19-2009 BY 60322 UC/LP/STP/ JCF 


(OTP) (FBI) 


From: 

Sent; 

To: 

Cc: 

Subject: 


l flTD> (FBi) 

Wednesday, June 2 3. 2004 2;47 PM 
~I (ITD) (FBI) 

I IfTD) fFBh ^ 

Meeting with EAD 



DCS-5000.ppt (115 
KB) 

SENSITIVE BUT UNCLASSIFIED 

NON-RECORD 


b6 

b7C 



I I wanted us to put something together for Mr j | - 1 think 


Here is my input. 


At the reques t of Language Services Section, Office of International Operations (010), SSA[ 


and ET 


attended a meeting to discuss the Work Flow Manager (WFM) currently in place for use with the 


DCS -5000 / Red Wolf systems. 


Attending the meeting were : 


b2 

b6 

b7C 

b7E 


J(CTD) 

^CTD) 


KOIO) 


(OIO) 



MrJ 


was interested in the capability of the WFM to gather and report data which could ^sist him in 

746 




decision making regarding the collection and processing of FISA intercepts. We provided Mr. I I with a 

brief overview of the interaction between the DCS 5000 and WFM (PPT presentation attached). We also 
discussed some of the existing query/report capabilities of WFM and the possibility of developing case based or 
language based queries in the future. The discussions also addressed the ‘tier’ prioritization scheme being 
implemented for FISA cases, and how this could be included as feature of the DCS-5000 and WFM. We agreed 
that a fo llow-up meeting should be held which included representatives of the FISA Management Systems and 
^ o insure that we have a more complete picture of the process and possible technical solutions. 


Language Services will coordinate the follow-up meeting. 


b2 

b6 

b7C 

b7E 


SENSITIVE BUT UNCLASSIFIED 
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ALL INFGRHATIOK COIJTAIUED 

HEREIN IS UNCLASSIFIED 

DATE 02-19-2009 BY 60322 UC/LP/STPyJCF 


(OTP) (FBI) 


From: | 

rcoN) 



Sent; 





To: 


(FBI);! 

I (ITD) (FBI);! 

I (ITD) 


(FBhl |( 

TD) (FBI):I 

I(ITD) (FBI) 


Cc: 

I (CON)l 

f?CON) 

I 

Subject: 

I (CON) 

Kt: KedWolf redundant database 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


b2 

b6 

b7C 

b7E 


We are looking at having the! ~ldat abase solution. We will need a second 


server. We will also need! 

solution which includes I 

berver 

software and] jserver software. T 

he server software will provide 

. I 


These capabilities are also outlined on Attachrrent-4 of the 

proposal for 

bated May 


6, 2004. 


Let me know if you have any other questions. 


From:[ 


■Or iginal Message- 


Se nt: Monday, June 21, 2004 7 :38 AM 


] (FBI) 


To :ON) 

Ccj (CON) 

Subject: FW: RedWolf redundant database 


b2 

b6 

b7C 

bTE 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Please provide them with the particulars 

Oriqinal Message 

From; | J (ITD) (FBI) 

Se nt; Thursday, June 1/, 2004 3:5 0 PM 
To J i (FBI) 

Cc: 


(ITD) (FBI);! 


Subject: RE: RedWolf redundant database 


](rTD) (FBI); 


(ITD) (FBI) 


SENSITIVE BUT UNCLASSIFIED 
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NON-RECORD 


In order to best understand the particulars of what you are asking, I'll have l ~l contact you 

in regards to this request. Since your new system is already on order, it will take a separate purchase order to procure 
a data base backup system. We'll look into it 

MJ 


O riginal Message- 

From; 


Se nt; Thursday, June 10/ 2004 ;^;09 PM 


(FBI) 


To: 

Cc: 

Subject: RedWolf redundant database 


(ITD) (FBI) 
HD) (FBI) 


b2 

b6 

b7C 

b7E 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


I'm sending this to both of you because I'm not sure I have the correct e-mail addresses! 


could! 


2 


althou gh | |is happy with the new system you are sending, If possible, or if you have end of year money 

]price tag is probably still less than 


]get a recfundant database for our RedWolf System. The[ 


pour separate systems. This will assist with data recovery in the event of a failure. Thanks again. 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 
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ALL IiaFOPMATIOW COHTAIHED 

HEREIN IS UNCLASSIFIED 

DATE 02-19-2009 BY' 60322 UC/LP/STP/ JCF ■ 


]|°TD) (FBI) 


From: 

Sent: 

To: 

Cc: 

Subject: 


1 (ITD) (FBI) 

Wednesday. June 23. 20 04 5:05 PM 
I , I niD^ (FBI) 

InT Dl (FBI) 

RE: Meeting with EAD | 


SENSmVE BUT UNCLASSIFIED 
NON-RECORD 


Hello Guvs, 


when you return, provide Mr. 


|with a brief (written) regarding your meeting at FBiHQ, as 
has prepared. At this level, our Section Chief should be in the know in the event he receives a call for clarification. Let's 
attempt to complete this task ASAP. 


b2 

b6 

b7C 

b7E 


Thanks, 



- — O riginal Message — - 

From i ~l (rTD) (FBI) 

Sent; Wednesday, June 23, 2004 2:47 PM 

To 
Cc 

Subject; Meeting with EAD 


(UD) (FBI) 
:rTD) fFBII 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 



I |wanted 


us to put something together for Mr. 


- 1 think 


b2 

b6 

b7C 

b7E 


Here is my input. 


At the request of Language Services Section, Office of International Operations (OIO), SSA 
ET( 


and 


Jattended a meeting to discuss the Work Flow Manager (WFM) currently in place for use 


with the DCS-5000 / RedWolf systems. 


7“W 





Attending the meeting were ; 


L I fCTD) 

| (CTD) 

K OIO) 

1 ( 010 ) 


b2 

b6 

b7C 

b7E 


Mr, 


Kvas interested in the capability of the WFM to gather and report data which could assist him 


in decision making regarding the collection and processing of FISA intercepts. We provided Mrl 


with a brief overview of the interaction between the DCS 5000 and WFM (PPT presentation attached). We 
also discussed some of the existing query/report capabilities of WFM and the possibility of developing case 
based or language based queries in the fbtiire. The discussions also addressed the ‘tier’ prioritization scheme 
being implemented for FISA cases, and how this could be included as feature of the DCS-5000 and WFM. 
We agreed that a follow-up meeting should be held which included representatives of the FISA Management 


Systems and| 
solutions. 


to insure that we have a more complete picture of the process and possible technical 


Language Services will coordinate the follow-up meeting. 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence : ROUTINE 


Date: 11/04/2004 



Attn: 



b2 

b6 

b7C 

b7E 


All SSAs 


From: 


ELSUR 


Investigative 

Technoloaies 

Contact : SA 


Approved By: 


'•S 

Drafted By: f 


djg 


Case ID #: 

66-1871 (Pending) 

66F-T 94S (Pending) 

66F- A77710 (Pending) 

66F- 86020 (Pending) 

Ti'tle: Revised Procedures- for Handling ' Title 50 

(FISA) Electronic Surveillance ^(ELSUR) 

Material from the Red Wolf Digital Collection System 


Synopsis: Dyi-e to the 

system and a 


stallation of a new FISA digital collection 


clarify and supercede all 

L previous | 

pertaining to the 


FISA digital coll 


^worlcstatio n, the p rocedures outlined below 

Division communications 


Details: The purpose of this document is to articulate policies 

and procedures for the proper handling of the | 

Disks that are used to archive Title 50 (FISA) Electronic 
Surveillance (ELSUR) material removed from the Red Wolf digital 
collection system. These procedures will ensure that proper 
"quality control" practices are in place to prevent the loss of any 
intercepted material and to maintain the integrity and chain of 
custody of the material. These procedures will follow the FBI's 
ELSUR guidelines. 








Due to the features of this new digital collection 
system, the procedures outlined below clarify, simplify and 
supercede all \ communications pertaining to this 

subject matter. 


b2 

b7E 
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X . Deleted Page(s) X 
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ALL IWFORKATTOM COWTAIHED 

HEREIN IS UNCLASSIFIED 

DATE 03-30-2009 BY 60322 UC/LP/STP/-JCF 


(OTP) (FBI) 


From: 

Sent: 

To: 

Cc; 

Subject: 


riTD) (FBI) 

Thiirftriav Jannary 1 j'^QS 3:48 PM 


1 


01) (FBI). 
ITD) (FBI)I 


llTD) (FBI) 


RE; OIG Closeout Due 01/19/2005 


PD(FBI) 

Recommendation 7 


SENSmVE BUT UNCLASSIFIED 
NON-RECORD 


— Original Message--— 

From:| KQI) (FBI) 

Se nt: Thursday, January 13 , 2005 m-4nAM 

Toi ^ I (ITD) (FBI); 1 \jTD) (FBI) 

Cc:| l OTD) (FBI) 

Subject: RE: OIG Closeout Due 01/19/2005 Recommendation 7 


b2 

b6 

b7C 

b7E 


UNCLASSIFIED 

NON-RECORD 


Gentfemen. 


The deadline for dosing out the recommenations from the OIG audit is 01/19/2005, The verbiage below if from 
our previous response to recommendation 7 . In reviewing the previous response, it seems we have r esponded 
primarily to the issue of 


ljutwe have not responded to the issue 


y*[ease 


845 





advise: 



The report needs to be delivered to 0!G by 01/19, but I need to finish up by COB Friday to give it time to make it 
through ail the hoops. 
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Page 253 ~ Duplicate 
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X No Dubjication Fee X 
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(OTP) (FBI) 


ALL IHFORHATIOH COETAIMED DATE: 04-27-20Q9 

HEREIH IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 ucy Ip/scp/fls 

WHERE SHOOT OTHERWISE REASON: 1.4 (c) 

DECLASSIFY ON: 04-27-2034 


From: 


1 klTD) (FBI) 


Sent: 


Tuesdav, March 15. 2005 1:00 PM 


To: 


KITD) (FBI) 


Cc: 


I/iVd) (FBI):I 




(S) 

(FBI) 



Subject: 

|Red Wolf Interface effort 



(ITD) 


(S) 

(S) 

(S) 



{ g J jpR^tseoRg 




bl 

b2 

b6 

b7C 

b7E 


Hi 


don’t believe IVe met you before^ bOt want to i ntroduce my self to you as one of the SSA's assigned 

to I ISPTU. One of his ProdramiSl , [has been tas ked to deliver the evii 

is aware of this as thel 


:now 


bngineers have enlisted his invaluable help on seve ral occasions already 



The effort has gotten to the point where I thought 


it would be appropriate for me to reach-out to you for some other "needs" that we have, and also start 
cutting ^u and [_Jinto our efforts. ^ 5 ^ 


As a result of 


jsessions at 


has determined that the 


[o ver th^ast 2 weeks, | 

following mo difications/en hancements are needed for ouQrw systems (preferably prior to being 
sent-out from! 


1 . 



2l 




3 


4. Upgrade RW Software to newest version. 



If it helps re the licensino issues, please stress to 

Ithaf 



The purpose o1 

f these systems is only tor 


[ into Red Wolf in a 

format as currently specified by Red Wolf. We. understand that if any of these changes need to be 
incorporated into the deployment package for Red Wolf, that anot her effort will be required with 

I nto Red Wolf is exploratory and we 


As we develo p potential solut ions to provide our data to Red Wolf in a way that will enhance the 
usability of ou | | we anticipate that there will be questions/interface needs with Raytheon 

Engineers. Is there a contracting vehicle availa ble that already exist for us to take advantage of, or 
will this be an additional task withl I 


S 


T 
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You've probably.got some questions about the basis for our needs here, so feel free to give me a call 
and we can sniff-out the next best step in our RW Interface effort. 

Thnx- 


Regards, 


Special Projects Technology Unit 


I nvesjiaative Techno 
Des 
Cell 




ogy Division 


b2 

b6 

b7C 


( 




552 






SE 


IiOTD) (FBI) 


ALL INFORMATION CONTAINED 
HEREIN IS UNCLASSIFIED EXCEPT 
NHERE SHOW OTHERWISE 


DATE: 04-27-2009 

CLASSIFIED BY 60322 ucyip/stp/fis 
REASON: 1.4 (c) 

DECLASSIFY ON: 04-27-2034 


(S) 


To: 


riTDHFBn 



Cc: 


iflTDi (FBn;l 

riTDt fCON> 

bl 

Subject; 

RE:[_ 

|Red Wolf Interface effort 


b2 

b6 




^ 

r ■ 

(S) 



It would be best 


b7C 

fo7E 


0 have a brief meeting with UC | l and myself so that we can have a better 


understanding of wha^ |it doing with it in regards to Red.Wolf. Also, I suggest 

a more detailed meeting with DCS-5000 t eam mern bers after you get more results from R aytheon (I 
know you are already communicating with I I In speaking today with I I Raytheon, 

they are already working on the suggested changes and look forwa rd to assisting SPTU in any way 


possible. I will have one of our contracts personnel 


look into your queries re a 


contract vehicle for SPTU to take advantage or if a separate task order is the way to go. I tend to 
think the answer will side with the latter, but I will defer to others more experienced in this area. I look 
forward to meeting you.... 


(S) 


— Ori ginal Message- 

From: 


Icno) (FBI) 


To: 

Cc: 


I Im-m fFBn 



'(ITD)' (FBI); 


(ITD) (FBI); 


I 




(ITD) 


Subject: 


Red Wolf Interface effort 



i^) 

(S) 

(S) 

(S)- 


Hi 


assigned to 

ISPTU, One of his Prooraffisi has been tasked to deliver 

the evidence 

1 1 know lis aware of 

this as I 

nave enlisted nis invaluable help on several occasions already 

The effort has gotten to 


"needs" that we have, and also start cutting you and Qinto our efforts. 


As a result ofl 


sessions a1 


over the pa^ j h as determined that 


the following modifications/enhancements are needed for ouQrW systems {preferably prior to 







4. Upgrade RW Software to newest version 


If it helps re the licensing issues, 


in a format as currently specifie 
to be incorpora 
with Raytheon. 


►lease stre ss to| Jthat| 

I The purpose of these systems is only for 

pnto Red Wolf 

►y Red Wolf. We understand that if any of these changes need 





As we develop potential solu tions to provide our data to Red Wolf in a way that will enhance the 
usability of our ] I we anticipate that there will be questions/interface needs with 

Raytheon Engineers. Is there a contracting vehicle available t hat already exist for us to take 
advantage of, or will this be an additional task with 

You've probably got some questions about the basis for our needs here, so feel free to give me a 
call and we can sniff-out the next best step in our RW Interface effort. 


Thnx- 


Regards, 


b2 

b6 

• b7C 



Special Projects Technology Unit 
Inves tigative Technolo gy Division 
Des k:! ~ ] 

Cell;] r 


SENSITI' 


ISIFIED 
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(OTP) (FBI) 


ALL INFORMATION CONTAINED 04-27-2009 

HEREIN IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 uc/Ip/stp/fis 

WHERE SHOWN OTHERWISE' REASON: 1.4 (c) 

DECLASSIFY ON: 04-27-2034 


From: 

Sent: 

To: 

[ 

I(1TD)(FBI) 

TupctHaw Mflrrh PM 



fJTD) fFB!>: I , I f ITD) fFBl) 

Cc: 

(S) 


1 IfiTD) (FBI);| 


nxm (FRM 

klTD) m 

Subject: 

1 

jRed Wolf Interface effort 



bl 

b2 

b6 

b7C 

b7E 


I spoke w ith F 
requestec[ 


] briefly this afternoon addressing the requests listed below. We've 

for a quote to perform the four tasks described below. In addition, we have a 


mechanism in place to provide some technical support. A more comprehensive technical support 
plan is being discussed. In the meantime, we should get a quick response in order to review the 
expense and technical hurdles, if any. Our goal is to expedite these requests and get your testing 
( S ) started as quickly as. possible. 

Th nrnrRP ri forward, we plan to integrate a bi-weekly technical discussion/status mtgs between 

will send a notification with details when this is established. Tentatively striving 


for next Tues afternoon. Please let me know if you have any further questions/concerns. 


Regards, 


— O riginal Message — 

From 


l(rTD) (FBI) 


Se nt; Tuesday. March 15, 2005 1:00 PM 


(S) ... To: 

Cc; 

(FBI) 

Subjectd 


(ITD) (FBI) 
(ITD) (FBI); 


Red Wolf Interface effort 


KITD) (FBI); 


(ITD) 


"SENSfflVE^UTUNCLASSTFlEP ^ 



I don't believe I've met you before, but want to introduce myself to you as one of the SSA's 


698 


1 








..(SI 


(SJ - ■ 

( s ) ;• 

(S) 


assigned to[3 
theev idence 
this asT’’- 



ISPTU. One of his Prbdfams 


1 


as bee 
I know 



to deliver 
is aware of 


Viave eniistea nis invaiuapie nelp on severafocc asions already 

The effort has gotten to 


the point where I thought it wouid be appropriate for rne^to reach-out to you for some other 
"heeds" that we have, and a^^ start cutting you and| jnto our efforts. 


As a result ofl 


sessions at[ 


]over the pa^2 weeks 


deteimined that 

the foliowing modifi cations/enha ncements are needed for oui|_jRW systems (preferably prior to 
being sent-out from| 


1 

2. 


1 


4. Upgrade RW Software to newest version 


If it helps re the licensing issues, oiease stre ss tc[ 


3 ss tq }hat ^ 

The purpose of these systems is only for 


into Red Wolf 

th & Tofrttat a§ currently Speditidd by Kdd Wdit. WeunderStSha"that It any ot these changes need 



bl 

b2 

b6 

blC 

hlE 


You've probably got some questions about the basis for our needs here, so feel free to give me a 
cail and we can sniff-out the next best step in our RW Interface effort. 

Thnx- 


Regards, 


Special Projects Technology Unit 
Inves tigative Technolo gy Division 


Des 

Cell 
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From: 

Sent; 

To: 

Subject: 



ALL IMFOFUKA7IOK. CONTAINED . 04-27-2009 

HEREIN IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 uc/lp/scp/f is 

TOERE SHOOT OTHERWISE REASON: 1,4 (c) ‘ 

DECLASSIFY ON; 04-27-2034 


(S) 


OTP) (FBI) 


(ITD)(FBI) 
Wednesday. March 16 2005 8:14 AM 

J(ITD) (FBI) 


RE: 


ed Wolf Interface effort 



Thanks for the quick response 


bi 
b2 
b6 
■ b7C 
b7E 


1 ) 


— Or iginal Message- 

From:! 


1(ITD)(FBI) 


Se nt: Tuesday, March 15, 200 5 3:36 PM 


To: 

Cc: 


fri D) (FBI); 




](ITD) 


IFfii 


Subject: RE: 


MTTD) (F BI);I 

□ (ITD) (FBI) 


(ITD) (FBI); 


(UD) 


Red Wolf Interface effort 


UT UNCLASSTFI^ 






All, 

I spoke wi thi 1 briefly this afternoon addressing the requests listed below. We've 

requested ! for a quote to perform the four tasks desoribed below. In addition, we have a 

mechanism in place to provide some technical support. A more comprehensive technical support 
plan is being discussed. In the meantime, we should get a quick response in order to review the 
expense and technical hurdles, if any. Our goal Is to expedite these requests and get your testing 
started as quickly as possible. 

tn p roceed forward we plan to Integrate a bi-weekly technical discussibn/status mtgs between 
ERp j t will send a notification with details when this is established. Tentatively 

striving for next Tues afternoon. Please let me know if you have any further questions/concerns. 


Regards, 






(S) 




Or iginal Message- 

From j 


](ITD) (FBI) 


Se nt: Tuesday. March 15, 2005 1:00 PM 


To: 

(FBI) 

Subject: 


(ITD) (FBI) 
RiTD) (FBI)- 


(ITD) (FBI); 


J(ITD) 


Red Wolf Interface effort 


SENgrnVE-BDTUNClJV^^ 
NON-RECOmr ^ 



bl 

b2 

b6 

b7C 

b7E 


iS) M 


(S) 

(S) 


don’t belie ve I've met vou b efdrfe, but want to iritroduce mvself to you as one of the SSA's 
assigned to I ISPTU, One of his Pfograrnsl _ I has been taskeila. 


deliver the evid encel 
aware of this as 
a!ready[ 




]l know 


t 


several o ccasio n s 
J The effort 


IS 


has gotten to the point where I thought it would be appropriate forme to reach-out to you for 
some other "needs" that we have, and also start cutting you and^ ^into our efforts. 

(S) , ® ■ 

sessions a^ | over the past 2 weeks| [determined 


As a result of 
that the following mod meat 
prior to being sent-out fronrj 


ons/enhancements are needed for ouQrW systems (preferably 


1 . 


2. 


3. 


4. Upgrade RW Software to newest version 


(SJ 


If it helps re the licensing issues, please stre ss to 


The purpose o 


thati 


f these systems is only for 


into Red 

Wolf in-a format as currently specified by Red Wolf. We understand that if any of th ese 
changes need to be incor porated into the deployment package for Red Wolf, that another 
effort will be required with ! 


into Red Wolf is exploratory and wa 


As we develop potential solutions to provide our data to Red Wolf in a way that will enhance 


the usability of oD 


we anticipate that there will be questions/interface needs with 


jEngineefS. I6 thbre a contracting .vehicl e available th at already exist for us to take 


advantage of, or will this be an additional task with 



174 












You've probably got some questions about the basis for our needs here, so feel free to give 
me a call and we can sniff-out the next best step in our RW Interface effort. 

Thnx- 

b2 ■ ■ 

Regards, bic . 


Special Projects Technology Unit 
Inves tigative Technolo gy Division 
Desk! I 

Cell:^ I 
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ALL IHFORHATIOH COJJTAINSD ■ 
HEE^IW IS UJICLASSiFIED EXCEPT 
WHERE SHOW OTHERWISE • 


DATE: 04-27-2009. 

CLASSIFIED BY 60322 uc/lp/stp/f is 
REASON: 1.4 (c) 

DECLASSIFY OH: 04-27-2‘034' 


From: 1 

IdTDl rFBIl 


Sent: 

Wednesday. March 16. 2005 2:44 PM 


To: 

, tlTDWFSn 


Cc: 

l(ITD) (FBI);! 

OTD) (FBI): 


Subject: 


(S) 


FW: 


Red Wolf Interface effort 






n,. , , , 

ENSTTiVE^a^ 


TED 


bl 

b2 

b6 

b7C 

b7E 


>RD 


(S) 


] 


It would be best to h ave a brief meeting with uc [ l and myself so that we can have a better 
understanding of what | it doing with it in regards to Red Wolf. Al so. I sugge st 

a more detailed meeting with DCS-5000 t eam mern bers after you get mor e results fromi It 

know you are already communicating with i | In speaking today with[ 


they are already working on the suggested change s and look fonwa rd to assisting SPTU in anyway 


look into your queries re a 


possible. I will have one of our contracts personnel!_ 

contract vehicle for SPTU to take advantage or if a separate task order is the way to go. I tend to 
think the answer will side with the latter, but I will defer to others more knowledgeable. I look forward 
to meeting you.... 


[ 


13) 


Ori ginal Message- 

From: 


l(rro)(FBi) 


to: 

|(m» (FBI); 

, (ITD) 

Cc: 

\ lOTD) (FBI); 

i(iTDr{FBi);r 


(FBI); 
Subject: REl 


](ITD) (FBI) 


](nx>) 


Red Wolf Interface effort 


SENSmV&BUt UNCjJ^SSfFfgP 
NON-RE) 



All, 


spoke with 


requested [ 


briefly this afternoon addressing the requests listed below. We've 
for a quote to perform the four tasks described below. In addition, we have a 
mechanism in place to provide some technical support. A more comprehensive technical support 
plan is being discussed. In the meantime, we should get a quick response in order to review the 
expense and technical hurdles, if any. Our goal is to expedite these requests and get your testing 










SpS(ET 

started as quickly as possible. 

To proceed forward, we plan to integrate a bi-weekly technical discussion/status mtgs between 

~|l will send a notification with details when this is established. Tentatively striving 


for next Tues afternoon. Please let me know if you have any further questions/concerns. 


Regards, 


<S) 


bl 
b2 
b6 
b7C 
■ b7E 


— Original Message- 

From:! 


To: 

Cc: 


iJTD) (FBI) 


II nanyKFBn 

(ITD) (FBI); 


(ITD) (FBI); 


Subject: 


(ITD) 


Red Wolf Interface effort 



(S) 

(S) 

(S) ' 

(S) 

(S) 


Hi 


J don't belie ve I've rfiet vou b efore, but want to introduce mvself to vou as one of the SSA's 
assigned tol ISPTU. One o^his Pfb grams [ has been tasked to deliver 

the ev idenc^ 
this as{ 


is aware of 


to Red Wolf (RW)! I know 
have enlisted his invaluable help on several oc casions already 

The effort has gotten to 


the point where I thought it would be appropriate for me to reach-out to you for some other 
'■needs" that we have, and also start cutting you andQinto our efforts. 


AS a result bf 


sessions at 


over the pa^ weeks 


determined that 


the following modifi catlo'ns/enha ncements are needed for our|_{RW systems (preferably prior to 
being sent-out fromj 


1 . 


2.1 




3. 

□ 

4. Upgrade RW Software to newest version. 


If it helps re the licensing issues, please stress tq 

that 




into Red Wolf 



ITT 









r 


s|b^t 

in a format as currently specified by Red Wolf. We understand that if any of these changes need 
to b e incorporated into the deployment package for Red Wolf, that ano ther effort will be required 
with i fc nto Red Wolf is exploratory 

and we are still gathering information. 

(Sj 

As we develo p potential solut ions to provide our data to Red Wolf in a way that will enhance the 
usability of Pu l j we anticipate that there will be questions/interface needs with 

I "l Engineers. Is there a contracting vehicl e available th at already exist for us to take 

advantage of, or will this be an additional task with 

• . I ' . 

You've probably got some questions about the basis for our needs here, so feel free to give me a 
call and we can sniff-out the next best step in our RW Interface effort. 



bl 

b2 

b6 

b7C 

b7E 
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ALl IKPORKATIOW COUTAIHED 04-27-2009 

HEREIN IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 uc/lp/stp/f Is 

NHERE SHONH OTHERWISE REASON: 1.4 (c) 

DECLASSIFY ON: 04-27-2034 

(FBI) t>l 

b2 
b6 
b7C 
b7E 



As mentioned earlier, I think it would be best if TICTU shares a posture of allowing SDPU do their testing with TICTU 
provide advisitory support untii SPDU efforts finalize. 



Supervisory Special Agent 
Telecommunications Intercept and 








It was under our impression from discussions with thi 


stress 


engineers 


idy supported on their 


jwould be the most cost effective and simple 


solution for interfacing various systems into the Redwolf CALEA protocol seems 
manufact urers and Redw olf deveioo ers and does not su pport (in our interpretatior 
Engineer ! lis looking atl Ifor a solution to interfaceF 

provid e a solution for | 

Iwas the best solution Tori I 


le left at the interp retation of the C.O. 
- " j Another ERF 
l lnto the Redwoif and 
[engineers informed us that 


This reques t for the four items is to allow us to begin to evaluate ! I From this, we can determine 

what j wili/won't support and return our recommendations for better support and integration. We have to get the 
systemsTirst to be able to preform this evaluation. These four items, in our view based upon our exposure at ! I 

during training, would provide a quick way to get started on evaluation for future use. We already have other changes that 
we would ike to have designed into the Redwolf but knew it wo uld requi re major enaineeiin a chanaes/de velopment by 
I These items would be discussed at a later time with! lan d other enqineer q 1 

We do agree that there may and will be problems with! but we wtlJ find th em through our testing. Again 

rtwflsniir{jnder.<;tandlngthafl J Engineers at Ravtheon 

believed that! 


! is not left out Right now, we need to see what| 
engineering changes. During this same time. ! I part diarine 
would be major engineering design changes/effort on 


e table with 
But this 


518 . 










Thanks 



ITD - Electronic Surveillance Technology Section 
Special Projects Technolo gy Unit (SPTU) 

Work #; I I 

Pager#: 


bl 

b2 

b6 

b7C 

b7E 




I don't intend to make any further prep arations until mana gement has a discuss on and determine what our 
involvement is, if any, Also, how does i I responsibilities f I fit into this project, if any? Are her 

development/testing efforts combined with your efforts? This too needs to be addressed by management 


With that a sidel ys working the initial four re quests. They have several concerns: ! 

iunsurewhatl ' I will do to the system performance/reliabilitv. l 

|is presenting major heartburn. You may have to assume some RISK in order to 
proceed with vour t^tinoj n^der to help expedite things, can we j . 

■ ■ [This may determine if the system can perform reliably enough to upgrade the others anl 

proceed with more Tobu^ testing. This will be the first of many benchmark tests. Let me know your thoughts.. 


troceed wrth vour testing 


Status 







1(0TD) (FBI) 


ALL INFORMATION CONTAINED 
HEREIN 13 UNCLASSIFIED EXCEPT 
WHERE SHOWN OTHERWISE 


DATE: 04-27-2009 

CLASSIFIED BY 60322 uc/lp/stp/f Is 
REASON: 1.4 (cj 
DECLASSIFY ON: 04-27--2034 


From: 

Sent: 

To: 

Cc: 


(ITDHFBI) 


(S) 


FriHav March 18 PDn?j 2:04 PM 

IlIDJ (FBI) 



(FB 

RE; 


a 


IflTD^ fFBIV l 


(ITD) (FB1)[: 
(ITD) (FBOn 


h 


TOTFBII:[ 




5l 


P(ITD)(FBI}^ 

niTD)(FBIl£: 


j{ITD) (FBI) 


jm 


hi 

b2 

b6 

b7C 

b7E 



It was under our impression from dis cussions with the| 

I I They thought it would 




Again, we stresJ 


be just 


engineers thaJ 
a simpld~ 


is alrea dy supported on their 

to enable this feature for our 


3wouid be me most cost erreciive ana simple 


soiution for interfacing various systems into the Redwolf. CALEA protocol seems t o be left at the interp retation of the C-O. 
manufact urers and Redw olf develop ers and does not su pport (in our interpretatinnl J Another ERF 

Engineer,! I is looking at! Ifor a solution to interface! into the Redwolf and 

provid e a solution tor | jengineers informed us that 

I | was the best solution for | 


This reques t for the four items is to allow us to begin to evaluate f 

I I wi li/won't support and return our recommendations for better support and integration. We have to get the 


what 


From this, we can determine 


systems first to be able to preform this evaluation. These four items, in our view based upon our exposure at[ 


] 


during training, would provide a quick way to get started on evaluation for future use. We already have other changes that 


we would 


ike to have designed into the Redwolf but knew it would xpauire major enaineerin q chanaes/de velopment by 


, These items would be discussed at a later time with 
we 00 a^ee that there may and will be problems withl 
it was our understanding thatT^ 
believed thad 




] 


and other engineer 
Jbut we will find th em through our testing. Again 

Engineers af 


lis not left out. Right now, w e need to see whatf 

can define! 


engineering changes. During this same time, 
would be major engineering design changes/enort ori 


will/wont do so that we can come to th e table with 

But this 


part. 


SSAJ 


concurrence with alt! 


Thanks 


Iwill be contacting 


for further management discussions. The above statements are in 


ITD - Electronic Surveillance Technology Section 
Special projects Technolpav Unit (SPTU) 

Work #: 

Pager#: 


-—-Original Message — 

From:| I (HD) (FBI) 

Se nt; Friday. March 18. 200 5 12:14 PM 
Toj I (ITD) (FBI); 


]jTD) (FBI); 


(ITD) (FBI) 





9 


?;E 




SubjicEa 


ImmxEBi); 


(ITD) (FBI) 


UNCLASSIFIED 

NON-RECORD 


bl 

b2 

b6 

b7C 

b7E 


All, 

.. I don't intend to make any further ore oaratfons until mana gement has a discussi on and determine what our 
involvement is, if any. Also, how does l Tr esponsibilities l ^ t into this project, if any? Are her 

development/testing efforts combined with your efforts?! his too needs to be addressed by management. 

Wth that as ide. I I is working the initial four r^ uests. They have several concerns: f I 

[ \| unsure whai ^ Iwill do to the system performance/rel ia bility ,| | 

I I is presenting major heartburn. You may have to assume some RISK in order to 

proceed with your testing. In order to help expedite things, can we | I 

I F his may determine if the system can perrorm reitaoiy enougn to upgraae me otners ana 

proceed with more robust testing. This will be the first of many benchmark tests. Let me know your thoughts- 

Status 
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SE 


kOTD) (FBI) 


AU- INFORHATiOM CO^TTAIHED DATE: 04-27-2009 

HEKEIJI IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 uc/lp/stp/fi 

WHERE SHOWN OTHERWISE REASON: 1.4 (c) 

DECLASSIFY ON: 04-27-2034 ■ 


(S) 


From: 

Sent: 

To: 

Cc: 

Subject: 


](ITD) (FBI) 


(S) 


Prirla'/ Ularrh 1ft ?nnq 5;44 PM 

■ - . (ITD) f£Eli 

FWj 


](lTD)(CON) 


Red Wolf Interface effort 



N^NgfiSeOI^D- 


bl 

b2 

b6 

b7C 

b7E 


(S) 


] 


to RW, it would be 


I want to reiterate that since SPTU has been tasked to deliver^ 
best if SPTU runs with this and TICTU take an advisory role until after all testing/experimentation is 
conipleted. Consequently, a ny fu nding matters until completion should be borne with SPTU; 
afterwards,..? In talking with ! I todav. he light ly mentio ned costs, but our discussion did not go 


much furthef sin ce I though t it would be better if 


Jand I was briefed to gain a better 


H i 

understanding bf j TICTU and SPTU engage in those technical meetings you suggested 

below. There simply is not enough information for TICTU to chew on at this time which would afford 
us a better understanding of w hat need s to be accomplished and our role in accomplishing it. Default 

You are doing a terrific job assisting SPTU during this phase 


any monetary questions to me 

and 1 am confident that will continue. I will be OOD until Thursday; call me on the cell if you feel 
more is needed or you have any suggestions. 


please look into the funding queries mentioned below. Thanks. 


(S) 


Or qinal Message- 

From:! 


](ITD) (FBI) 


Se nt: Wednesday, March 16, 2 005 2:44 PM 
To ;| f I TD)(FBI) 

GcJ K rTDTTFBD i 


](rTD) (FBI); 


(CON) 

Subject: FSN: 


jn-D) 


Red Wolf Interface effort 


(S) 


SEWSfflVE_BUT UNCU^SStFIgp ' 
NON-RI 



□ 


It would be tn havp a hripf m'pptinn wit 


understanding 


3 


and rriyself so that we can have a better 


t doing with it in regards to Red Wolf. Al so, t sugge st 


a more detailed meeting with uub-buuu team members after you get more results from[ 









know you are already communicating with] | In speaking today with] | 

they are already working on the suggested changes and look forwa rd to assisting SPTU in any way 
possible. I will have one of our contracts personnel l I look into your queries re a 

contract vehicle for SPJU to take advantage or if a separate task order is the way to go. I tend to 
think the answer will side with the latter, but I will defer to others more knowledgeable. I look forward 
to meeting you ... 


- — Ori ginal Message 

From: ! U lTP) (FBI) 

Se nt: Tuesday. March 15, 200 5 3:36 PM 
To; | I nr puFBn:! 

Cc; | I OTP) fF BI):l 

(FBn- l , l (ITD)(FBI) 

Subject: RE; ^ iRed Wolf Interface effort 


l(ITD) 

(UD) (FBI); 



(ITD) 


SE^ 

NON-f 


ITU! 


Ted 


bl 

b2 

b6 

b7C 

b7E 


I spoke with briefly this afternoon addressing the requests listed below. We've 

requested! |for a quote to perform the four tasks described below. In addition, we have a 

mechanism in place to provide some technical support. A more comprehensive technical support 
plan is being discussed. In the meantime, we should get a quick response in order to review the 
expense and technical hurdles, if any. Our goal is to expedite these requests and get your testing 
started as quickly as possible. 

Tn nrnnfipd forward we plan to integrate a bi-weekly technical discussion/status mtgs between 

I will send a notification with details when this is established. Tentatively striving 

for next Tues afternoon. Please let me know if you have any further questions/concerns. 


Regards, 


— O riginal Message — 

From J ~ I flTD) (FBI) 

Se nt; Tuesday. March 15, 2005 1:00 PM 
Toi l I hTDI (FBI) 

Cc; l K ITD) (FB!); ! 

(FBI) . ^ ^ 

Subject: Red Wolf Interface effort 


(m?) (FBI); 



rro) 
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SENSmV&BUT UNCLASStFlgP ^ 



bl 

b2 

b6 

b7C 

b7E 


Hi 


I don’t belie ve I've met you b efore, but want to introduce mvself to vo^] as one of the SSA's 

ISPTU. One of his Pfog fernsL 


assigned to 
the evideacil 
this asl 


Jo Red Wolf (RW). I know 


has been tasked to deliver 

is aware of 


have enlisted his invaluable help on several oc casions already 

The effort has gotten to 


the point where I thought it would be appropriate for me to reach-out to you for some other 
"needs" that we have, and also start cutting you and[^into our efforts. 

As a result of| 

the following moaiT icatiorTS?enha ncemehts areTie'eded for ourjlRW systems (preferably prior to 
being sent-out fronf ' 


sessions at over the pa^ weeks l "I determined that 

■ . • I _ I l^« Hi . / r l_l. ? A_ 


1 


2 . 


3. 


4. Upgrade RW Software to newest version. 


If it helps re the licensing issues, please stre ss tq 


]that 


The purpose of these systems is only Tor 

~ ' [ into Red Wolf 

in a format as currently specified by Red Wolf. We understand that if any of these changes need 
to b e incorporated into the deployment package for Red Wolf, that ano ther effort will be required 
withf 


I 


into Red Wolf is exploratory 


As we d evelop potential solu tions to provide our data to Red Wolf in a way that will enhance the 
usabilityl |we anticipate that there will be questions/interface needs with 

JEngin^rs, Is there a contracting vehicl e available t hat already exist for us to take 


advantage of, or will this be an additional task with 


]? 


You've probably got some questions about the basis for our needs here, so feel free to give me a 
call and we can sniff-out the next best step in our RW Interface effort, 

Thnx- 


Regards, 


Special Projects Technology Unit 


s£pi<j 
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ALL IHFQRHATIOJT CQWTkimD 
HEREIN IS UNCLASSIFIED EXCEPT 
WHERE SHOW OTHERWISE 


(OTP) (FBI) 


DATE: 0-1-28-2009 

CLASSIFIED BY 60322 uc/lp/stp/f Is 
REASON: 1.4 (c) 

DECLASSIFY ON: 04-28-2034 


From: 

Sent: 

To: 

Cc: 


Subject; 


](ITD) (FBI) 


Wftrinftsriav Marnl| 23, 2005 10.28 AM 


(SI 




RE: 


UKreLASSlHEl^" 


NON- 




RD 


(ITD1 fFB lV 

(ITD) (FBJlI 






J(ITD) (FBI):(II 




l(!TD)iEfiU: 




(ITD) (FBI) 


](ITD) (FBI); 


bl 

b2 

b6 

b7C 

b7E 


Hi 


Good talking to you last week. I w jll be keeping vou cut-in as we get closer to realizinp what our 
needs will be b ased on our testing 
with his help ad ' 

is: 


interfacing with 


re these needs. The status from 


f. 


has been great 
so far 


Status 



We're still certain that we will need I I 

RedWolfs, so we can then make an accurate appraisal of the requirements needed for us to pump all 
of our ELSUR into Red Wolf. Just let me knovy what you need from me to pursue these 2 items. 


Regards, 


Special Projects Technology Unit 
Oper ational Technolo gy Division 
Desk il ~n 

Cell: I 
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It was under our impression from dis cussions with the 

They thniinht it would be lust a simple 


1 Again, we stress 


lengineers that! I is alrea dy supported on their 


aoj 

I to enable th is fftatnr^ for 


]would be the most cost effective 


and simple solution for interfacing various systems into the Redwolf. CALEA protocol seems to be left at the 
interpretati on of the C.O. manufact urers and Redw olf develop ers and does not s upport (in our interpretaticjnil 

I for a solution to interface 


1 Another ERF Engineer, [ 
lEto the Redwolf and provid e a solu tion for 
Engineers informed us that[ 


looking atF 


Iwas the pest solution Tor[^ 


1 


This reques t for the four items is to allow us to begin to evaluate] 1 From this, we can determine 

wha ^ 1 will/won't support and return our recommendations for better support and integration. We have to get the 
systems first to be able to preform this evaluation. These four items, in our view based upon our exposure at 

^iuring training, would provide a quick way to get started on evaluation for future use. We already have other 
chahges that we would li ke, to have d esigned into the Redwolf but knew it would require r naior enq ineerinq 
changes/dey elopment by ] ~j These items would be discussed at a later time with ] I and other engineere 

'! but we will find them thr ough our testing. 

Engineers at 


We do agree that there may and wi ll be problems withF 
Again it wa s our under standing thatl 
I pelieved that l 


is not left out. Right now, we nee d to see what] 


with engineering changes. During this same time, 
this would be major engineering design changes/effort onl 


Iwill/won't do so that we can come to the tab le 

candefineT' i But 

part 


(S) SSAl 


will be contacting r 


are in concurrence with ail 


] for further management discussions. The above statements 


Thanks 


ITD - Electronic Surveillance Technology Section 
Special Projects Technolqgv Unit (SPTU) 

Work #; 

Pager #: 


Ori qinai Message- 

From;L 


](ITD) (FBI) 


Se nt; Friday. March 18. 200 5 12:14 PM 
( S ) . To: I , ^ n(ITD) (FBI){ 


] (ITD) (FBI); 


](rTD) 


<FBI) 

Cc:E 


Subjecta 


IfrTDWFB II: 


](ITD)(FBI) 
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I don't intend to make any further prep arations until mana gement has a discussi on and determine what our 
involvement is, if any. Also, how does I ~| responsibilities ! I fit into this project, if any? Are her 

development/testing efforts combined with your efforts? This too needs to be addressed by management. 


With that aside ! M wo rking the initial four requests. They have several concerns: ! I 

runsure whatl I will do to the system Derformance/reliabilitv .l I 

[ is presenting major heartburn. You mav have to assume some 
RISK in order to proceed with your testing. In (xd er to help expedite things, can we ! 

■"■■■■ iThis may determine if the system can perform reliably enough to 

upgrade the others and proceed with more robust testing. This will be the first of many benchmark tests. Let me 
know your thoughts.. 







1(0TD) (FBI) 


AIL IHFOPHATIOW COFTAIHED DATE: 04-28-2009 

HEPZIW IS XOTCLA5SIFIED. EXCEPT CLASSIFIED BY 60322 uc/lp/sCp/f Ls 

¥HERE SHOUN OTHERWISE REASON: 1.4 (c) 

. DECLASSIFY OH; C4-2S-2034 


From: 


To: 

Cc: 

Subject: 

^jKrskAssiagfi^ 

?D 


l(ITD) (FBI) 

Monday. April 04. 2005 3:1^ PM 

(ITD) (FBI) 


FW; 




bl 

b2 

b6 

b7C 

b7E 







□ 


received a Technical Engineering Change proposal (hard copy) from|_ 


is prepared 
or a total of 


to modify one of TICTU's existing technical contracts to support SPTU's research efforts. I I is asking 

l Obviously, 

the question on the table is who is going to 'ante up' the chips for this hand in the venture.' When you get the chance,.. . 
please give me a holler to discuss this. Thanks. 


- — O riginal Message- 

Fromi 


(ITD) (FBI) 


Se nt; Friday, March 18, 2 005 2:04 PM . 


To; 

Ca 


k 


HD) (FBI) 
□(ITD) (FBIlI 


Subject; RE: 


, - .rrD) (FBI);] 

1( rTD)(FBI);l K UDTTfb!)! 


(ITD) (FBI)f 


rr iD) (FBI): 


] (ITD) (FBI) 


](rTD) (FBI)[ 


IOTP) (FBI) ; 



UNCIr^SIPrED 
NQN<FfgC&^ ^ 


it was under our impression from disc ussions with th j 

i f They thought it would be just a simpler 


] engineers thaf 


is alrea dy supported on their 

Ito enable this feature for our 




1 Again, we sYessT 


]wouid be the most cost effective and simple 


solution for interfacing various systems into the Redwolf. CALEA protocol seems to be left at the interpretation of the C.O. 


Engineer,] Ms lookina atl 

Ifor a solution to interface! 

Into the Redwolf and 

provide a solution for] 


jengineers informed us that 

1 |was the best solution for| 1 


This reques t for the four items is to allow us to begin to evaluateL I From this, we can determine 

what i I will/won't support and return our recommendations for better support and integration. We have to get the 
systems first to be able to preform this evaluation. These four items, in our view based upon our exposure at[f 


during training, would provide a quick way to get started on evaluation for future use. We atready have other changes that 
we would like to have designed into the Redwolf but knew if wo uld requi re major engineering chanaes/de velopment by 
I 1 These items would be discussed at a later time wifhl lan d other engineers I I 

We do agree that there may and will be nmhlemswlthl Ihnt.wA wni find through o ur testing. Again 

it was our understanding thaj| j Engineers at ) 



i 


(SI 


believed that 




is not left out. Right now, w e need to see whatT 
engineerinq changes. During this same timel lean defin^ 


would be major engineering design changes/effort onl 




Iwill/won't do so that we can come to th e table with 

~l But this 


ss4 


concurrence with alt 


Thanks 


Iwill be contacting 


for further management discussions. The above statements are in 


ITD - Electronic Surveillance Technology Section 
Special Prelects Technolp av Unit (SPTU) 

Work #; 

Pager #; 


bl 

b2 

b6 

b7C 

b7E 


(S) 


— Or iginal Message- 

From: 


](1TD) (FBI) 


Sent; Friday, March 18, 2005 12:14 PM 

To;i _ I (UD) md 

_ IfrTDUFB n: 

Subject i I 


](ITD) (FBI); 


(ITD) (FBI) 


(ITD) (FBI) 


u^neLASsiaetf " 

NONJRgeORD 


All, 


(S) 


I don't intend to make any further pre parations until mana gement has a d 
involvement is, if any. Also, how does T t responsibi1ities[ 


iscussi on and determine what our 

fit into this project, if any? Are her 
development/testing efforts combined with your efforts? This top needs to oe addressed by management 


With that aside. 


0 


unsure what 


s working the initial. four re quests. They have several concerns: . 

Jwill do to the system performance/reliabiiityr 
jartburn. You may have to assume some RfS 


j s presenting- major heartburn _ _ 
proceed with vour testing J n order to help expedite things, can we[ 


K in^der !o 


iThis may determine if the system can perform reliably enough to upgrade others and 


proceed vyith more robust testing. This will be the first of many benchmark tests. Let me know, your thoughts.. 


Status 










From; 

Sent: 

To: 

Co: 

Subject; 



(OTP) (FBI) 


ALL IHFOSMATION COFTAIHED ' DATE: 04-30-2009 

HEREIN IS UNCLASSIFIED EXCEPT CLASSIFIED BY 60322 uc/ip/stp/Eis 

NHEKE SHOWN OTHERWISE REASON: 1.4 (c) 

DECLASSIFY ON: 04-30-2034 


JOTD) (FBI) 


TPRiTf 


Mav • 1.2005 4:06 PM 
^ (OTD) (FBI):r^ 

I (OTD) (EBJD 

rFRi\i 



—1 KUIUMrPMJ 

(OTD) (FBI):I 

l(ITD) (FBI) 


REi 


'irweu^siHEif 

now=regord 


bl 

b2 

b6 

b7C 

b7E 


Hi 


We have been given the go-ahead for the enhancements as described below for our 
money for this purchase/contract modification is as follows: 


Our 


I know t his is a bad time for more of this kind of papenwork for you all - what would you like us to 
do to get | | to move on this? 

Thanx again for all your patience. 


Regards, 


Special Projects Technology Unit 
Operational Technology Division 

Desl ^:l ;1 

Cell; 


Q rlatnal Message- — - 

From J (FBI) 

( s ) Sent! Monday. April 04. 2005 3:13 PM 
to;! . lOTO^ (FBI) 

CcP 


Subject: FW: 


HTD’i (FBI') 


~ tm€U\SSIFiEg ^ 


□ 

I received a Technical Engineering Change proposal (hard copy) from 

prepared to modify one of TICTU's existing te chnical contracts to support SPTU’s research efforts, 
off 


£ 


c 


asking for a tota l 


]Obviousty, the question on the table is who is going to 'ante up' the chips for this hand in the venture. 







